Apache2: php-cgi /fcgid - Forbidden 403

toto1988 · 7. März 2012

Hallo Community,

ich wollte von php_mod auf php-cgi umstellen und hat dazu die Pakete installiert und teilweise auch configs nach Vorgaben geändert. Will ich jetzt eine Seite aufrufen erhalte ich einen 403 Fehler.

Forbidden

You don't have permission to access /index.php on this server.

Eingesetzt wird der Apache 2.29 auf Debian 5. Habt ihr mir vielleicht ein paar Tipps woran es liegen könnte.

Danke
toto1988

Anzeige

phraser · 7. März 2012

AW: Apache2: php-cgi /fcgid - Forbidden 403

schau dir mal die logs an:

/var/logs/apache2 dürfte der standart-pfad sein.

toto1988 · 7. März 2012

AW: Apache2: php-cgi /fcgid - Forbidden 403

error2.log

Das andere stammt z.B. von HlstatsX und hat nix damit zu tun.

Hier noch ein Auszug vom DocumentRoot

drwxr-xr-x 16 greiner root 4,0K 2. Mär 19:16 .
drwxr-xr-x 7 greiner root 4,0K 7. Mär 11:56 ..
drwxr-xr-x 10 greiner users 4,0K 2. Mär 11:12 administrator
drwxr-xr-x 2 greiner root 4,0K 2. Mär 11:12 cache
drwxr-xr-x 2 greiner users 4,0K 2. Mär 11:12 cli
drwxrwxrwx 13 greiner users 4,0K 2. Mär 11:14 components
-rwxrwxrwx 1 greiner users 2,1K 7. Mär 09:19 configuration.php
-rw-r--r-- 1 greiner users 3,1K 2. Mär 11:01 .htaccess
drwxrwxrwx 4 greiner users 4,0K 3. Mär 16:40 images
drwxr-xr-x 2 greiner users 4,0K 2. Mär 11:14 includes
-rw-r--r-- 1 greiner users 1,3K 2. Mär 11:01 index.php
-rw-r--r-- 1 greiner users 1,8K 2. Mär 11:01 joomla.xml
drwxr-xr-x 5 greiner root 4,0K 2. Mär 19:11 language
drwxrwxrwx 7 greiner users 4,0K 2. Mär 10:55 libraries
-rw-r--r-- 1 greiner users 18K 2. Mär 11:01 LICENSE.txt
drwxr-xr-x 2 greiner root 4,0K 2. Mär 10:55 logs
drwxr-xr-x 14 greiner root 4,0K 2. Mär 10:58 media
drwxrwxrwx 26 greiner users 4,0K 2. Mär 10:59 modules
drwxr-xr-x 13 greiner root 4,0K 2. Mär 11:00 plugins
-rw-r--r-- 1 greiner users 4,2K 2. Mär 11:01 README.txt
-rwxr-xr-x 1 greiner root 865 2. Mär 11:01 robots.txt
drwxrwxrwx 10 greiner users 4,0K 4. Mär 17:15 templates
drwxrwxrwx 10 greiner users 4,0K 7. Mär 10:35 tmp
-rwxr-xr-x 1 greiner root 1,7K 2. Mär 11:01 web.config.txt

Klicke in dieses Feld, um es in vollständiger Größe anzuzeigen.

Hat das vielleicht irgendwas mit den Gruppen zu tun? www-data?

toto1988

Fraggdieb · 7. März 2012

AW: Apache2: php-cgi /fcgid - Forbidden 403

Also schonmal vorneweg. Rechte sind komplett im *****. Nice dass die .php Daten unter root laufen. Dafür schonmal:

chown -R www-data:www-data /var/www/******

Dann mal Apache restart und direkt nach dem Aufrufen einer .php Datei die Logeinträge bezüglich diesem Aufruf checken.
Weiterhin wie schauen die alle Configs aus? (fcgid.cfg, vhost, fcgid-starter) Ich tippe auf 1) Rechte oder 2) vHost

toto1988 · 7. März 2012

AW: Apache2: php-cgi /fcgid - Forbidden 403

war Aufgrund der spielereien gottseidank nur in dem einen Ordner --> Rechte korrigiert!

vhost

fcgi-start

fcgid.conf

<IfModule mod_fcgid.c>
# IdleTimeout n (300 seconds)
# An idle fastcgi application will be terminated after IdleTimeout seconds.
IdleTimeout 600

# IdleScanInterval n (120 seconds)
# The scan interval for idle fastcgi applications.
IdleScanInterval 240

# BusyTimeout n (300 seconds)
# A fastcgi application will be terminated if handing a single request
# longer than busy timeout.
BusyTimeout 300

# BusyScanInterval n (120 seconds)
# The scan interval for busy timeout fastcgi applications.
BusyScanInterval 120

# ErrorScanInterval n (3 seconds)
# The scan interval for exit pending fastcgi applications. fastcgi
# applications will be terminated within this scanning.
ErrorScanInterval 6

# ZombieScanInterval n (3 seconds)
# The scan interval for zombie process.
ZombieScanInterval 6

# ProcessLifeTime n (3600 seconds)
# A fastcgi application will be terminated if lifetime expired,
# even no error is detected.
ProcessLifeTime 3600

# SocketPath path (logs/fcgidsock)
# The directory to put the UNIX domain socket. (UNIX only)
# This directory should be writable only by apache user
SocketPath /var/lib/apache2/fcgid/sock

#SharememPath path (logs/fcgid_shm)
#The share memory file path. (UNIX only) (version >= 2.1 only)
SharememPath /var/lib/apache2/fcgid/shm

# SpawnScoreUpLimit n (10)
# The spawn-speed control score up water limit. Score increases while
# a process is spawned or terminated, and decreases as time progresses;
# while the score is higher than SpawnScoreUpLimit, the spawning will be
# held for a while. The higher this number is, the higher speed of the
# spawning can be.
SpawnScoreUpLimit 10

# SpawnScore n (1)
# The weight of spawning. This weight will be plused to the spawn-control
# score on every spawn. The higher this number is, the lower speed of
# spawning can be.
SpawnScore 1

# TerminationScore n (2)
# The weight of termination. This weight will be plused to the score while
# fastcgi process terminates. The higher this number is, the lower speed
# of spawning can be.
TerminationScore 2

# MaxProcessCount n (1000)
# The max count of total fastcgi process count.
MaxProcessCount 750

# DefaultMaxClassProcessCount n (100)
# The maximum number of fastcgi application instances allowed to run for
# particular one fastcgi application.
DefaultMaxClassProcessCount 15

# DefaultMinClassProcessCount n (3)
# The minimum number of fastcgi application instances for any one fastcgi
# application.
# Idle fastcgi will not be killed if their count is less than n
# Set this to 0, and tweak IdleTimeout
DefaultMinClassProcessCount 0

# DefaultInitEnv env_name env_value
# The default environment variables before a fastcgi application
# is spawned. You can set this configuration more than once.

# IPCConnectTimeout n (3 seconds)
# The connect timeout to a fastcgi application.
IPCConnectTimeout 30

# IPCCommTimeout n (20 seconds)
# The communication timeout to a fastcgi application. Please increase this
# value if your CGI have a slow initialization or slow respond.
IPCCommTimeout 120

# OutputBufferSize n (64k bytes)
# CGI output cache buffer size.

# PHP_Fix_Pathinfo_Enable n(n=0/1, default 0)
# If you are using PHP and set cgi.fix_pathinfo=1 in php.ini, set PHP_Fix_Pathinfo_Enable 1.
# From php.ini:
# cgi.fix_pathinfo provides *real* PATH_INFO/PATH_TRANSLATED support for CGI. PHP's
# previous behaviour was to set PATH_TRANSLATED to SCRIPT_FILENAME, and to not grok
# what PATH_INFO is. For more information on PATH_INFO, see the cgi specs. Setting
# this to 1 will cause PHP CGI to fix it's paths to conform to the spec. A setting
# of zero causes PHP to behave as before. Default is zero. You should fix your scripts
# to use SCRIPT_FILENAME rather than PATH_TRANSLATED.
# cgi.fix_pathinfo=1
PHP_Fix_Pathinfo_Enable 1

MaxRequestsPerProcess 500

AddHandler fcgid-script .php
AddHandler fcgid-script .fcgi

AddType application/x-httpd-php .php

<Directory "/var/www/php-fcgid-scripts">
SetHandler fcgid-script
Options +ExecCGI
Order allow,deny
Allow from all
</Directory>
</IfModule>

Klicke in dieses Feld, um es in vollständiger Größe anzuzeigen.

apache2.conf

ServerRoot "/etc/apache2"

#
# The accept serialization lock file MUST BE STORED ON A LOCAL DISK.
#
#<IfModule !mpm_winnt.c>
#<IfModule !mpm_netware.c>
LockFile /var/lock/apache2/accept.lock
#</IfModule>
#</IfModule>

#
# PidFile: The file in which the server should record its process
# identification number when it starts.
# This needs to be set in /etc/apache2/envvars
#
PidFile ${APACHE_PID_FILE}

#
# Timeout: The number of seconds before receives and sends time out.
#
Timeout 300

#
# KeepAlive: Whether or not to allow persistent connections (more than
# one request per connection). Set to "Off" to deactivate.
#
KeepAlive On

#
# MaxKeepAliveRequests: The maximum number of requests to allow
# during a persistent connection. Set to 0 to allow an unlimited amount.
# We recommend you leave this number high, for maximum performance.
#
MaxKeepAliveRequests 100

#
# KeepAliveTimeout: Number of seconds to wait for the next request from the
# same client on the same connection.
#
KeepAliveTimeout 15

# prefork MPM
# StartServers: number of server processes to start
# MinSpareServers: minimum number of server processes which are kept spare
# MaxSpareServers: maximum number of server processes which are kept spare
# MaxClients: maximum number of server processes allowed to start
# MaxRequestsPerChild: maximum number of requests a server process serves
<IfModule mpm_prefork_module>
StartServers 5
MinSpareServers 5
MaxSpareServers 10
MaxClients 250
MaxRequestsPerChild 5000
</IfModule>

# worker MPM
# StartServers: initial number of server processes to start
# MaxClients: maximum number of simultaneous client connections
# MinSpareThreads: minimum number of worker threads which are kept spare
# MaxSpareThreads: maximum number of worker threads which are kept spare
# ThreadsPerChild: constant number of worker threads in each server process
# MaxRequestsPerChild: maximum number of requests a server process serves
<IfModule mpm_worker_module>
StartServers 2
MaxClients 150
MinSpareThreads 25
MaxSpareThreads 75
ThreadsPerChild 25
MaxRequestsPerChild 0
</IfModule>

AccessFileName .htaccess

#
# The following lines prevent .htaccess and .htpasswd files from being
# viewed by Web clients.
#
<Files ~ "^\.ht">
Order allow,deny
Deny from all
</Files>

# Include module configuration:
Include /etc/apache2/mods-enabled/*.load
Include /etc/apache2/mods-enabled/*.conf

# Include all the user configurations:
Include /etc/apache2/httpd.conf

# Include ports listing
Include /etc/apache2/ports.conf

# Include generic snippets of statements
Include /etc/apache2/conf.d/

# Include the virtual host configurations:
Include /etc/apache2/sites-enabled/

Klicke in dieses Feld, um es in vollständiger Größe anzuzeigen.

httpd.conf

Nützliche Suchen

Apache2: php-cgi /fcgid - Forbidden 403

Videos zum Themenbereich