osdir.com
mailing list archive

Subject: (solved) mpm-itk "Permission denied: unable to connect to cgi daemon after multiple tries:" - msg#00037

List: debian-isp

Date: Prev Next Index Thread: Prev Next Index

This is more for google than anything else.

Based on Russell Coker's helpful post, we've been using mpm-itk to set UID/GID per apache web site for a while.

Recently I setup a new debian etch / apache 2 server and the error logs filled with:

Permission denied: unable to connect to cgi daemon
after multiple tries:

By default debian apache2 seems to come w/ cgid enabled:

http://httpd.apache.org/docs/2.0/mod/mod_cgid.html

cgid's purpose is:

On certain unix operating systems, forking a process
from a multi-threaded server is a very expensive operation
because the new process will replicate all the threads of
the parent process. In order to avoid incurring this expense
on each CGI invocation, mod_cgid creates an external daemon
that is responsible for forking child processes to run CGI
scripts. The main server communicates with this daemon using
a unix domain socket.

If I understand correctly, mpm-itk does forks not threads, so mod_cgid does nothing for it.

I can imagine that it would be problematic for various mpm-itk processes to attempt to write to

/var/run/apache2/cgisock.$PROCESS_ID_OF_APACHE_CGID_DAEMON

The solution was to disable cgid by removing the symlinks to /etc/apache2/mods-available/

rm /etc/apache2/mods-enabled/cgid.conf
rm /etc/apache2/mods-enabled/cgid.load

and reloading apache:

/etc/init.d/apach2/

I did the symlink removal by hand because a2dismod couldn't seem to separate mod_cgi (which we need for cgi scripts) from mod_cgid


--
To UNSUBSCRIBE, email to debian-isp-REQUEST@xxxxxxxxxxxxxxxx
with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx

Was this page helpful?
Yes No
Thread at a glance:

Previous Message by Date: click to view message preview

Re: Fwd: SMTP Server

On Tue Feb 24, 2009 at 07:10:06 +1100, Daniel Hood wrote: > I'm building a medium-sized business network, with a few internal and > external webservers, an exchange server, a couple of IDS's and even a > network management system. Most (if not all) of these servers, require > an SMTP server in some way or form. Whether its to reset a users > password via email, or send an alert that a link has gone down. > I'm wondering, whats the best way to configure an SMTP(s) server for > this, both easily to setup and manage but also securely. If you're already installing, and expecting to use, Microsoft Exchange then why not relay mail there? On all the machines I maintain, for example, I have a single mailserver and I just configure each system to mail: lists-root@xxxxxxxxxxxxxxxxx That way all root messages to to a single mailing list where different staff members, or people, can view them. If you install ssmtp, nullmailer, or similar on each of the boxes that's sufficient to route outgoing mails - theres no need to run SMTP service to receive mail on the boxes, surely? Steve -- Managed Anti-Spam Service http://mail-scanning.com/ -- To UNSUBSCRIBE, email to debian-isp-REQUEST@xxxxxxxxxxxxxxxx with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx

Next Message by Date: click to view message preview

Re: (solved) mpm-itk "Permission denied: unable to connect to cgi daemon after multiple tries:"

On Tue, Feb 24, 2009 at 01:23:14PM -0500, Dan MacNeil wrote: > Recently I setup a new debian etch / apache 2 server and the error logs > filled with: > > Permission denied: unable to connect to cgi daemon > after multiple tries: > > By default debian apache2 seems to come w/ cgid enabled: > > http://httpd.apache.org/docs/2.0/mod/mod_cgid.html Oh. In retrospect I should have remembered this; it's written in Debian's release notes. It should be fixed in lenny anyway. /* Steinar */ -- Homepage: http://www.sesse.net/ -- To UNSUBSCRIBE, email to debian-isp-REQUEST@xxxxxxxxxxxxxxxx with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx

Previous Message by Thread: click to view message preview

Fwd: SMTP Server

Hello, I'm building a medium-sized business network, with a few internal and external webservers, an exchange server, a couple of IDS's and even a network management system. Most (if not all) of these servers, require an SMTP server in some way or form. Whether its to reset a users password via email, or send an alert that a link has gone down. I'm wondering, whats the best way to configure an SMTP(s) server for this, both easily to setup and manage but also securely. Do I set up an SMTP server on each of the servers that require one, and then (for Anti-spam purposes) set up a MX record and PTR record to each of them? This would require time and a lot of administration to keep them all up. Or do I set up one large SMTP server and authenticate via a username/password or via ip? Daniel -- To UNSUBSCRIBE, email to debian-isp-REQUEST@xxxxxxxxxxxxxxxx with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx

Next Message by Thread: click to view message preview

Re: (solved) mpm-itk "Permission denied: unable to connect to cgi daemon after multiple tries:"

On Tue, Feb 24, 2009 at 01:23:14PM -0500, Dan MacNeil wrote: > Recently I setup a new debian etch / apache 2 server and the error logs > filled with: > > Permission denied: unable to connect to cgi daemon > after multiple tries: > > By default debian apache2 seems to come w/ cgid enabled: > > http://httpd.apache.org/docs/2.0/mod/mod_cgid.html Oh. In retrospect I should have remembered this; it's written in Debian's release notes. It should be fixed in lenny anyway. /* Steinar */ -- Homepage: http://www.sesse.net/ -- To UNSUBSCRIBE, email to debian-isp-REQUEST@xxxxxxxxxxxxxxxx with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx
Loading Comments...
Home | News | Patents | Sitemap | FAQ | advertise

Advertising by