Nginx + PHP-FPM: Permissions on UNIX socket

Steve steeeeeveee at gmx.net
Fri May 11 01:34:46 UTC 2012


-------- Original-Nachricht --------
> Datum: Thu, 10 May 2012 21:14:18 -0400
> Von: "B.R." <reallfqq-nginx at yahoo.fr>
> An: nginx at nginx.org
> Betreff: Re: Nginx + PHP-FPM: Permissions on UNIX socket

> I am using the package up-to-date provided by Nginx in their repository
> for
> Debian, not directly the one included in any Debian official repositories.
> 
> There --> http://nginx.org/en/download.html
>
Okay. Then maybe here -> http://trac.nginx.org/nginx/report


> ---
> *B. R.*
> 
> 
> On Thu, May 10, 2012 at 7:18 PM, Steve <steeeeeveee at gmx.net> wrote:
> 
> >
> > -------- Original-Nachricht --------
> > > Datum: Thu, 10 May 2012 18:31:47 -0400
> > > Von: "B.R." <reallfqq-nginx at yahoo.fr>
> > > An: nginx at nginx.org
> > > Betreff: Re: Nginx + PHP-FPM: Permissions on UNIX socket
> >
> > > Hi all again,
> > >
> > > As my nginx package (gathered from the Debian Sqeeze repository
> @Nginx)
> > > specified, the maintainer should be "Sergey Budnevitch"
> <sb at nginx.com>.
> > > However, I got a mailer daemon saying the user doesn't exist...
> > >
> > > How can I submit a bug to the Debian Squeeze Nginx package maintainer?
> > >
> > Maybe by using this URL -> http://www.debian.org/Bugs/
> >
> >
> > > ---
> > > *B. R.*
> > >
> > >
> > > On Wed, May 9, 2012 at 7:51 PM, B.R. <reallfqq-nginx at yahoo.fr> wrote:
> > >
> > > > Well,
> > > >
> > > > Following the advice of a friend, I made the Nginx user owner of the
> > > > socket.
> > > > Guess what: it works!
> > > >
> > > > I restricted the chmod to 0600 to be sure the group was involved.
> > > >
> > > > Now here is some questions:
> > > > Why can't we use the group right on the socket?
> > > > Why is it the owner user who only has an impact on the effectiveness
> of
> > > > the rights?
> > > >
> > > > The group is useless here... I am a little lost following that
> logic.
> > > > ---
> > > > *B. R.*
> > > >
> > > >
> > > >
> > > > On Wed, May 9, 2012 at 7:12 PM, B.R. <reallfqq-nginx at yahoo.fr>
> wrote:
> > > >
> > > >> Hi,
> > > >>
> > > >> I still don't get it...
> > > >> I even tried to put the UNIX socket file inside a directory whose
> > owner
> > > >> group was the 'www-data' one... Still 'Permission denied' in the
> Nginx
> > > log
> > > >> files!
> > > >>
> > > >> I reverted temporarily to the old way to bind Nginx with PHP-FPM,
> > using
> > > >> the standard TCP listening and restricting it to the local
> interface
> > > >> through my firewall.
> > > >>
> > > >> If someone had an idea on this, I would be glad if he contributed!
> > > >> ---
> > > >> *B. R.*
> > > >>
> > > >>
> > > >>
> > > >> On Wed, May 9, 2012 at 1:43 PM, B.R. <reallfqq-nginx at yahoo.fr>
> wrote:
> > > >>
> > > >>> Hi Mark,
> > > >>>
> > > >>> Since I don't have ACL installed, here is the output of all others
> > > >>> commands:
> > > >>>
> > > >>> $ sudo service php5-fpm restart
> > > >>> Restarting PHP5 FastCGI Process Manager: php5-fpm.
> > > >>>
> > > >>>
> > > >>> $ date +%Y-%m-%d\ %H:%M:%S
> > > >>> 2012-05-09 19:39:30
> > > >>>
> > > >>>
> > > >>> $ ls -ald /var /var/run /var/run/php-fpm.sock
> > > >>> drwxr-xr-x 16 root     root     4096 21 nov.  17:10 /var
> > > >>> drwxr-xr-x  7 root     root     4096  9 mai   19:39 /var/run
> > > >>> srw-rw----  1 www-data www-data    0  9 mai   19:39
> > > /var/run/php-fpm.sock
> > > >>>
> > > >>> $ groups nginx
> > > >>> nginx : www-data debian-transmission
> > > >>>
> > > >>> $ groups www-data
> > > >>> www-data : www-data
> > > >>>
> > > >>>
> > > >>> $ ps aux | grep -F -e php -e nginx
> > > >>>  root     19448  0.0  0.0  30400  1164 ?        Ss   May08   0:00
> > > nginx:
> > > >>> master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
> > > >>> nginx    19449  0.0  0.0  30808  2104 ?        S    May08   0:00
> > > nginx:
> > > >>> worker process
> > > >>> root     30316  0.0  0.1 108440  4252 ?        Ss   19:39   0:00
> > > >>> php-fpm: master process (/etc/php5/fpm/php-fpm.conf)
> > > >>> www-data 30317  0.0  0.0 108440  3788 ?        S    19:39   0:00
> > > >>> php-fpm: pool www
> > > >>> www-data 30318  0.0  0.0 108440  3788 ?        S    19:39   0:00
> > > >>> php-fpm: pool www
> > > >>> (me)    30330  0.0  0.0   9616   832 pts/0    S+   19:39   0:00
> grep
> > > -F
> > > >>> -e php -e nginx
> > > >>>
> > > >>> I still don't get the problem...
> > > >>> ---
> > > >>> *B. R.*
> > > >>>
> > > >>>
> > > >>>
> > > >>> On Wed, May 9, 2012 at 1:32 PM, W-Mark Kubacki
> > > <wmark+nginx at hurrikane.de
> > > >>> > wrote:
> > > >>>
> > > >>>> # (stop, then start php-fpm)
> > > >>>> # date +%Y-%m-%d\ %H:%M:%S
> > > >>>> # ls -ald /var /var/run /var/run/php-fpm.sock
> > > >>>> # getfacl /var/run/php-fpm.sock
> > > >>>> # groups nginx
> > > >>>> # groups www-data
> > > >>>> # ps aux | grep -F -e php -e nginx
> > > >>>>
> > > >>>
> > > >>>
> > > >>
> > > >
> >
> > --
> > Empfehlen Sie GMX DSL Ihren Freunden und Bekannten und wir
> > belohnen Sie mit bis zu 50,- Euro! https://freundschaftswerbung.gmx.de
> >
> > _______________________________________________
> > nginx mailing list
> > nginx at nginx.org
> > http://mailman.nginx.org/mailman/listinfo/nginx
> >

-- 
NEU: FreePhone 3-fach-Flat mit kostenlosem Smartphone!                                  
Jetzt informieren: http://mobile.1und1.de/?ac=OM.PW.PW003K20328T7073a



More information about the nginx mailing list