[BlueOnyx:27095] Re: fpmPort mismatch between vsite and its subdomain

[Rickard Osser]

HI,

I'm sorry to add this to your thread but I've discovered another
problem with Subdomains as well, there are phpvalue entries in the
conf-file for the subdomain added by the GUI
which makes the whole Apache process die.
I've had to comment those lines out by hand.

According to this from the log:

Från: Leif Burlin
Skickat: den 3 juli 2024 08:45
Till: Mikael Burell <mikael.burell at vfhsk.se>
Ämne: Felet
 
Jul 03 08:41:28 webadmin.zenbiz.se systemd[1]: Starting The Apache HTTP
Server...
Jul 03 08:41:28 webadmin.zenbiz.se httpd[272966]: AH00526: Syntax error
on line 31 of /etc/httpd/conf.d/subdomains/site8-bfhsk.se.conf:
Jul 03 08:41:28 webadmin.zenbiz.se httpd[272966]: Invalid command
'php_value[disable_functions]', perhaps misspelled or defined by a
module not included in the server configuration
Jul 03 08:41:28 webadmin.zenbiz.se systemd[1]: httpd.service: Main
process exited, code=exited, status=1/FAILURE
Jul 03 08:41:28 webadmin.zenbiz.se systemd[1]: httpd.service: Failed
with result 'exit-code'.
Jul 03 08:41:28 webadmin.zenbiz.se systemd[1]: Failed to start The
Apache HTTP Server.
 
R31:                    php_value[disable_functions] =
"exec,system,passthru,shell_exec,popen,escapeshellcmd,proc_open,proc_ni
ce,ini_restore,fwrite,file_put_contents,chmod,chown,mkdir,copy"
R32:                    php_value[disable_classes] = "SplFileObject"
 
R7x                      php_value[disable_functions] =
"exec,system,passthru,shell_exec,popen,escapeshellcmd,proc_open,proc_ni
ce,ini_restore,fwrite,file_put_contents,chmod,chown,mkdir,copy"
R7x                      php_value[disable_classes] = "SplFileObject"
 



I'm out driving on vacation so I can't log in to the system and check
more but I think it's a 5210R.

Thanks in advance,

Rickard



On Sat, 2024-07-06 at 22:01 +0900, Tomohiro Hosaka via Blueonyx wrote:
> Hello.
> 
> Subdomain has not been working since yum update yesterday in 5210R
> environment.
> 
> [Sat Jul 06 04:07:47.861415 2024] [proxy_fcgi:error] [pid 903704]
> [client XX:64304] AH01071: Got error 'PHP message: PHP Warning:
> Unknown: open_basedir restriction in effect.
> File(/home/.sites/site28/wwwroot/subd1/index.php) is not within the
> allowed path(s):
> (/tmp/:/var/lib/php/session/:/usr/sausalito/configs/php/:/home/solars
> peed/php-7.3/share/pear:/home/.sites/site2/)
> in Unknown on line 0
> 
> root # grep site28 /etc/group
> site28:x:1013:site28-admin,admin
> 
> root # fgrep fcgi /etc/httpd/conf/vhosts/site2
> <Proxy "fcgi://127.0.0.1:9013" retry=0>
>     Sethandler proxy:fcgi://127.0.0.1:9013
> <Proxy "fcgi://127.0.0.1:9013" retry=0>
>     Sethandler proxy:fcgi://127.0.0.1:9013
> 
> root # fgrep fcgi /etc/httpd/conf/vhosts/site28
> <Proxy "fcgi://127.0.0.1:9015" retry=0>
>     Sethandler proxy:fcgi://127.0.0.1:9015
> <Proxy "fcgi://127.0.0.1:9015" retry=0>
>     Sethandler proxy:fcgi://127.0.0.1:9015
> 
> root # fgrep fcgi /etc/httpd/conf.d/subdomains/site28-*
> /etc/httpd/conf.d/subdomains/site28-subd1.host.tld.conf:<Proxy
> "fcgi://127.0.0.1:9013" retry=0>
> /etc/httpd/conf.d/subdomains/site28-subd1.host.tld.conf:   
> Sethandler
> proxy:fcgi://127.0.0.1:9013
> /etc/httpd/conf.d/subdomains/site28-subd1.host.tld.conf:<Proxy
> "fcgi://127.0.0.1:9013" retry=0>
> /etc/httpd/conf.d/subdomains/site28-subd1.host.tld.conf:   
> Sethandler
> proxy:fcgi://127.0.0.1:9013
> /etc/httpd/conf.d/subdomains/site28-subd2.host.tld.conf:<Proxy
> "fcgi://127.0.0.1:9013" retry=0>
> /etc/httpd/conf.d/subdomains/site28-subd2.host.tld.conf:   
> Sethandler
> proxy:fcgi://127.0.0.1:9013
> /etc/httpd/conf.d/subdomains/site28-subd2.host.tld.conf:<Proxy
> "fcgi://127.0.0.1:9013" retry=0>
> /etc/httpd/conf.d/subdomains/site28-subd2.host.tld.conf:   
> Sethandler
> proxy:fcgi://127.0.0.1:9013
> 
> The fpmPort of the subdomain of site28 does not match the fpmPort of
> the vsite of site28.
> 
> The calculation method of fpmPort for
> /usr/sausalito/handlers/base/apache/virtual_host.pl does not match
> the calculation method of fpmPort for
> /usr/sausalito/handlers/base/subdomains/subdomain-new.pl.
> 
> virtual_host.pl is subdomain-new.pl plus the processing below.
> my $available_port = find_next_available_port($fpmPort);
> 
> It is natural that they may not be the same.
> 
> Also, find_next_available_port() is affected by the below, so at the
> time of rewriting /etc/httpd/conf/vhosts/site28,
> /etc/httpd/conf.d/subdomains/site28-*.conf should also be rewritten.
> my @php_fpm_ports = qx(cat /etc/php-fp*/* | grep 'listen =' | cut -d
> :
> -f 2 | sort -un);
> my @listening_ports = qx(netstat -tupan | grep LISTEN | grep
> 127.0.0.1
> > cut -d : -f2 | awk '{ print \$1 }' | sort -un);
> 
> Is fpmPort the correct behavior to match?
> Is this a bug?
> 
> Thanks
> _______________________________________________
> Blueonyx mailing list
> Blueonyx at mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx

-- 
Bluapp AB
Rickard Osser
CTO
Solberga Ängsväg 3
125 44 Älvsjö
Sweden

Web: http://www.bluapp.com
Mail: rickard.osser at bluapp.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20240708/d6be65f4/attachment.html>