suexec problem

[mbr]

I can't get suexec working...
CentOS 5 + ispCP + Apache/2.2.8+fcgid+php
all installed from packages

during apache start i get "suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)" message, in VirtualHost section i have
<IfModule suexec_module>
SuexecUserGroup user group
</IfModule>
but it's not working.... /var/log/httpd/suexec.log file is clean
how to debug this situation...where "to dig"? help me please...

httpd -M
...
suexec_module (shared)

httpd -V
Server version: Apache/2.2.8 (Unix)
Server built: Jan 22 2008 03:13:24
Server's Module Magic Number: 20051115:11
Server loaded: APR 1.2.12, APR-Util 1.2.12
Compiled using: APR 1.2.8, APR-Util 1.2.8
Architecture: 64-bit
Server MPM: Prefork
threaded: no
forked: yes (variable process count)
Server compiled with....
-D APACHE_MPM_DIR="server/mpm/prefork"
-D APR_HAS_SENDFILE
-D APR_HAS_MMAP
-D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
-D APR_USE_SYSVSEM_SERIALIZE
-D APR_USE_PTHREAD_SERIALIZE
-D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
-D APR_HAS_OTHER_CHILD
-D AP_HAVE_RELIABLE_PIPED_LOGS
-D DYNAMIC_MODULE_LIMIT=128
-D HTTPD_ROOT="/etc/httpd"
-D SUEXEC_BIN="/usr/sbin/suexec"
-D DEFAULT_PIDLOG="logs/httpd.pid"
-D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
-D DEFAULT_LOCKFILE="logs/accept.lock"
-D DEFAULT_ERRORLOG="logs/error_log"
-D AP_TYPES_CONFIG_FILE="conf/mime.types"
-D SERVER_CONFIG_FILE="conf/httpd.conf"

[kilburn]

Quote:-D APACHE_MPM_DIR="server/mpm/prefork"

Why don't you use the "worker" mpm module?

[joximu]

@killburn, mbr wrote:
but it's not working.... /var/log/httpd/suexec.log file is clean

but I (also) think with profork you don't need suexec... (dows suexec work with prefork??)

/J

[kilburn]

Hmmm, how do you know it's not working if there are NO errors anywhere?

[mbr]

(09-18-2009 09:13 PM)kilburn Wrote:  Hmmm, how do you know it's not working if there are NO errors anywhere?

It's not very difficult to ensure that the user the scripts are running uder is apache... and that's why I think so.

I may use mpm with module worker for example...but ispCP is generating VirtualHosts sections with section for suexec... so how to configure? (or it will work as it is?)

And still don't know why suexec is not working actually... :-(

[joximu]

Here's some help - maybe...

http://httpd.apache.org/docs/2.2/suexec.html