[ale] Apache

Jim Kinney jim.kinney at gmail.com
Tue Feb 16 18:17:03 EST 2010


Using suexec is always a chore. Using it with selinux in enforcing mode is
even more so.

The default web page on a new install of Centos works outside of suexec. If
it is failing, the basic apache config is hosed. Create a vanilla index.html
file with a super simple content like plain text and put it in
/var/www/html, restart apache and look for the root dir of the web service.
You will need to tweak httpd.conf to define suexec user on a per virtual
site basis.
Additionally, selinux settings are required to match the user dir settings
plus be web objects. If the site is internal static only pages, disable
selinux. If it is running a public facing web app, you may want to pull in
the EPEL repo and get the selinux and apache from there as that is more like
the fedora versions where the selinux is more complete.

On Feb 16, 2010 5:11 PM, "Terry Bailey" <terry at bitlinx.com> wrote:

Hi,

I just loaded CentOS 5.4 into a server.  The web page will not come
up.  So I cleaned out the error log and tried it once.  At that
point, error_log had the following data.

[Tue Feb 16 15:31:23 2010] [notice] SELinux policy enabled; httpd
running as context user_u:system_r:httpd_t:s0
[Tue Feb 16 15:31:23 2010] [notice] suEXEC mechanism enabled
(wrapper: /usr/sbin/suexec)
[Tue Feb 16 15:31:23 2010] [notice] Digest: generating secret for
digest authentication ...
[Tue Feb 16 15:31:23 2010] [notice] Digest: done
[Tue Feb 16 15:31:23 2010] [notice] Apache/2.2.3 (CentOS) configured
-- resuming normal operation



It looks like it has something to do with SELinux.  The httpd.conf
file says that Apache is running as apache.

Any help would be appreciated.

Thanks,

Terry Bailey


_______________________________________________
Ale mailing list
Ale at ale.org
http://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.ale.org/pipermail/ale/attachments/20100216/c1941e80/attachment.html 


More information about the Ale mailing list