On Mon, Nov 2, 2009 at 6:57 PM, Hugo Monteiro <monteiro.hugo@gmail.com> wrote:

> AND bandwidth limitation per user.

Using what? Don't say cpanel or some other garbage. It would have to
be something that tracks packets by user ID in a database.

On Nov 3, 2:58 am, Michael Shadle <mike...@gmail.com> wrote:
> On Mon, Nov 2, 2009 at 6:57 PM, Hugo Monteiro <monteiro.h...@gmail.com> wrote:
> > AND bandwidth limitation per user.
>
> Using what? Don't say cpanel or some other garbage. It would have to
> be something that tracks packets by user ID in a database.

An example using iptables, tc and the system uid.

http://www.linuxquestions.org/questions/linux-server-73/iptables-and-tc-for-limiting-bandwidth-per-linux-user-744365/

But this is really OT. The discussion is about the most secure and
flexible way to execute php dinamically setting the executing user uid/
gid, in a large environments.

R's

Hugo Monteiro.

(Off to bed now, but i'll be reading in the morning =))

On Tue, Nov 3, 2009 at 3:05 AM, Hugo Monteiro <monteiro.hugo@gmail.com> wrote:
> But this is really OT. The discussion is about the most secure and
> flexible way to execute php dinamically setting the executing user uid/
> gid, in a large environments.
>
> R's
>
> Hugo Monteiro.
>
> (Off to bed now, but i'll be reading in the morning =))
>

Hi !
Do you mean SuExec ?

http://www.perfectacumen.com/docs/HowTo_QA.html#qa_suexec
http://litespeedtech.com/support/forum/showthread.php?t=2915

Perhaps i am mistaken, but these features are lacking from php-fpm.
It would be worthwhile to write the appropriate nginx lsapi module.


Best regards

dreamcat4
dreamcat4@gmail.com

dreamcat four wrote:
> On Tue, Nov 3, 2009 at 3:05 AM, Hugo Monteiro <monteiro.hugo@gmail.com> wrote:
>
>> But this is really OT. The discussion is about the most secure and
>> flexible way to execute php dinamically setting the executing user uid/
>> gid, in a large environments.
>>
>> R's
>>
>> Hugo Monteiro.
>>
>> (Off to bed now, but i'll be reading in the morning =))
>>
>>
>
> Hi !
> Do you mean SuExec ?
>
> http://www.perfectacumen.com/docs/HowTo_QA.html#qa_suexec
> http://litespeedtech.com/support/forum/showthread.php?t=2915
>
> Perhaps i am mistaken, but these features are lacking from php-fpm.
> It would be worthwhile to write the appropriate nginx lsapi module.
>
>
> Best regards
>
> dreamcat4
> dreamcat4@gmail.com
>

Hi dreamcat,

From my understanding, SuExec, appart from the security stuff, works in
regular CGI mode, which is not what we are discussing here.
Please read the thread and not just the last messages.

R's,

Hugo Monteiro.

This thread is already all over the place.

FPM could use the features of suexe, would be nice to have someday.

-Jason

On Nov 3, 2009, at 8:07 AM, Hugo Monteiro <monteiro.hugo@gmail.com>
wrote:

>
> dreamcat four wrote:
>> On Tue, Nov 3, 2009 at 3:05 AM, Hugo Monteiro <monteiro.hugo@gmail.com
>> > wrote:
>>
>>> But this is really OT. The discussion is about the most secure and
>>> flexible way to execute php dinamically setting the executing user
>>> uid/
>>> gid, in a large environments.
>>>
>>> R's
>>>
>>> Hugo Monteiro.
>>>
>>> (Off to bed now, but i'll be reading in the morning =))
>>>
>>>
>>
>> Hi !
>> Do you mean SuExec ?
>>
>> http://www.perfectacumen.com/docs/HowTo_QA.html#qa_suexec
>> http://litespeedtech.com/support/forum/showthread.php?t=2915
>>
>> Perhaps i am mistaken, but these features are lacking from php-fpm.
>> It would be worthwhile to write the appropriate nginx lsapi module.
>>
>>
>> Best regards
>>
>> dreamcat4
>> dreamcat4@gmail.com
>>
>
> Hi dreamcat,
>
> From my understanding, SuExec, appart from the security stuff, works
> in regular CGI mode, which is not what we are discussing here.
> Please read the thread and not just the last messages.
>
> R's,
>
> Hugo Monteiro.

similar to some stuff already mentioned, my perfect solution, would be
being able to configure say 20 phps in one pool, and have the
webserver send the uid/gid, and when a request is made, a fastcgi php
suid's to the chosen user and then runs the code. with additional
configuration to limit the number per user that can be run.

This way for say 50 users, I could still have 20 php processes. Just
as an example.