|
|
Subject: (solved) mpm-itk "Permission denied: unable to connect to cgi daemon after multiple tries:" - msg#00037
List: debian-isp
This is more for google than anything else.
Based on Russell Coker's helpful post, we've been using mpm-itk to set
UID/GID per apache web site for a while.
Recently I setup a new debian etch / apache 2 server and the error logs
filled with:
Permission denied: unable to connect to cgi daemon
after multiple tries:
By default debian apache2 seems to come w/ cgid enabled:
http://httpd.apache.org/docs/2.0/mod/mod_cgid.html
cgid's purpose is:
On certain unix operating systems, forking a process
from a multi-threaded server is a very expensive operation
because the new process will replicate all the threads of
the parent process. In order to avoid incurring this expense
on each CGI invocation, mod_cgid creates an external daemon
that is responsible for forking child processes to run CGI
scripts. The main server communicates with this daemon using
a unix domain socket.
If I understand correctly, mpm-itk does forks not threads, so mod_cgid
does nothing for it.
I can imagine that it would be problematic for various mpm-itk processes
to attempt to write to
/var/run/apache2/cgisock.$PROCESS_ID_OF_APACHE_CGID_DAEMON
The solution was to disable cgid by removing the symlinks to
/etc/apache2/mods-available/
rm /etc/apache2/mods-enabled/cgid.conf
rm /etc/apache2/mods-enabled/cgid.load
and reloading apache:
/etc/init.d/apach2/
I did the symlink removal by hand because a2dismod couldn't seem to
separate mod_cgi (which we need for cgi scripts) from mod_cgid
--
To UNSUBSCRIBE, email to debian-isp-REQUEST@xxxxxxxxxxxxxxxx
with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx
Was this page helpful?
Thread at a glance:
Previous Message by Date:
click to view message preview
Re: Fwd: SMTP Server
On Tue Feb 24, 2009 at 07:10:06 +1100, Daniel Hood wrote:
> I'm building a medium-sized business network, with a few internal and
> external webservers, an exchange server, a couple of IDS's and even a
> network management system. Most (if not all) of these servers, require
> an SMTP server in some way or form. Whether its to reset a users
> password via email, or send an alert that a link has gone down.
> I'm wondering, whats the best way to configure an SMTP(s) server for
> this, both easily to setup and manage but also securely.
If you're already installing, and expecting to use, Microsoft
Exchange then why not relay mail there?
On all the machines I maintain, for example, I have a single
mailserver and I just configure each system to mail:
lists-root@xxxxxxxxxxxxxxxxx
That way all root messages to to a single mailing list where
different staff members, or people, can view them.
If you install ssmtp, nullmailer, or similar on each of the
boxes that's sufficient to route outgoing mails - theres no
need to run SMTP service to receive mail on the boxes, surely?
Steve
--
Managed Anti-Spam Service
http://mail-scanning.com/
--
To UNSUBSCRIBE, email to debian-isp-REQUEST@xxxxxxxxxxxxxxxx
with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx
Next Message by Date:
click to view message preview
Re: (solved) mpm-itk "Permission denied: unable to connect to cgi daemon after multiple tries:"
On Tue, Feb 24, 2009 at 01:23:14PM -0500, Dan MacNeil wrote:
> Recently I setup a new debian etch / apache 2 server and the error logs
> filled with:
>
> Permission denied: unable to connect to cgi daemon
> after multiple tries:
>
> By default debian apache2 seems to come w/ cgid enabled:
>
> http://httpd.apache.org/docs/2.0/mod/mod_cgid.html
Oh. In retrospect I should have remembered this; it's written in Debian's
release notes. It should be fixed in lenny anyway.
/* Steinar */
--
Homepage: http://www.sesse.net/
--
To UNSUBSCRIBE, email to debian-isp-REQUEST@xxxxxxxxxxxxxxxx
with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx
Previous Message by Thread:
click to view message preview
Fwd: SMTP Server
Hello,
I'm building a medium-sized business network, with a few internal and
external webservers, an exchange server, a couple of IDS's and even a
network management system. Most (if not all) of these servers, require
an SMTP server in some way or form. Whether its to reset a users
password via email, or send an alert that a link has gone down.
I'm wondering, whats the best way to configure an SMTP(s) server for
this, both easily to setup and manage but also securely.
Do I set up an SMTP server on each of the servers that require one,
and then (for Anti-spam purposes) set up a MX record and PTR record to
each of them? This would require time and a lot of administration to
keep them all up.
Or do I set up one large SMTP server and authenticate via a
username/password or via ip?
Daniel
--
To UNSUBSCRIBE, email to debian-isp-REQUEST@xxxxxxxxxxxxxxxx
with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx
Next Message by Thread:
click to view message preview
Re: (solved) mpm-itk "Permission denied: unable to connect to cgi daemon after multiple tries:"
On Tue, Feb 24, 2009 at 01:23:14PM -0500, Dan MacNeil wrote:
> Recently I setup a new debian etch / apache 2 server and the error logs
> filled with:
>
> Permission denied: unable to connect to cgi daemon
> after multiple tries:
>
> By default debian apache2 seems to come w/ cgid enabled:
>
> http://httpd.apache.org/docs/2.0/mod/mod_cgid.html
Oh. In retrospect I should have remembered this; it's written in Debian's
release notes. It should be fixed in lenny anyway.
/* Steinar */
--
Homepage: http://www.sesse.net/
--
To UNSUBSCRIBE, email to debian-isp-REQUEST@xxxxxxxxxxxxxxxx
with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx
|
|