From owner-freebsd-isp@FreeBSD.ORG  Fri May  9 18:03:13 2003
Return-Path: <owner-freebsd-isp@FreeBSD.ORG>
Delivered-To: freebsd-isp@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7629637B401
	for <freebsd-isp@freebsd.org>; Fri,  9 May 2003 18:03:13 -0700 (PDT)
Received: from aurora.siteplus.com (aurora.siteplus.com [66.129.2.160])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 97F9043F85
	for <freebsd-isp@freebsd.org>; Fri,  9 May 2003 18:03:12 -0700 (PDT)
	(envelope-from jim@jwweeks.com)
Received: from veager.jwweeks.com (pcp03144169pcs.midval01.tn.comcast.net
	[68.59.246.106])
	by aurora.siteplus.com (8.12.9/8.12.6) with ESMTP id h4A13EuU033534;
	Fri, 9 May 2003 21:03:14 -0400 (EDT)	(envelope-from jim@jwweeks.com)
Date: Fri, 9 May 2003 21:01:58 -0400 (EDT)
From: Jim Weeks <jim@jwweeks.com>
To: Troy Settle <troy@psknet.com>
In-Reply-To: <000601c315b9$ee795d10$aa8ffea9@abyss>
Message-ID: <20030509204619.G18208-100000@veager.jwweeks.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
cc: freebsd-isp@freebsd.org
cc: 'Jeremy Springer' <jeremys@oregontrail.net>
Subject: RE: Frontpage *ahem* woes
X-BeenThere: freebsd-isp@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Internet Services Providers <freebsd-isp.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-isp>
List-Post: <mailto:freebsd-isp@freebsd.org>
List-Help: <mailto:freebsd-isp-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 10 May 2003 01:03:13 -0000


On Thu, 8 May 2003, Troy Settle wrote:
>
> I should have been more clear...
>
> I did get the apache/ssl/fp combo to work, but what I ran into, was that
> every FP web had to run as the same user, which is/was not desirable.
>
> It all comes down to getting suexec/fpexec/etc to all play nice
> together, and I was unable to come up with the magic formula to get it
> done.

My work around for this problem has been to maintain a sub-domain DNS
record and two apache directives, one for publishing and one for
serving.  Something like:

<VirtualHost *.*.*.*>
DocumentRoot /usr/local/www/data/username/
ServerName domain.com
ServerAdmin webmaster@domain.com
ServerAlias www.domain.com
ScriptAlias /cgi-bin/ /usr/local/www/data/username/cgi-bin/
User username
Group username
ErrorLog /usr/log/domain.com-error_log
TransferLog /usr/log/domain.com-access_log
</VirtualHost>

<VirtualHost *.*.*.*>
DocumentRoot /usr/local/www/data/username/
ServerName publish.domain.com
ServerAdmin them@domain.com
</VirtualHost>

This requires copying domain.com:80.cnf to
publish.domain.com:80.cnf. Maybe this will work for you.

--
Jim