Re: Zend Server %%CLIENT%% authentication issues

After much granting an revoking of authorities I discovered the following fixed the problem

Adding the following to /www/zendsvr/conf/fastcgi.conf
IpcPublic *RWX

Plus

Folder /www/zendsvr requires *PUBLIC to have *RX authority.
Folder /www/zendsvr/logs requires *PUBLIC to have *RX authority.

Empirically it appears that the critical thing is the existence of the object /www/zendsvr/logs/fcgi-dpjmnpho.sock for which *PUBLIC must have *RWX authority.


Regards, Peter


-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Scott Klement
Sent: Friday, 14 December 2012 12:02 p.m.
To: Web Enabling the AS400 / iSeries
Subject: Re: [WEB400] Zend Server %%CLIENT%% authentication issues

Hi Peter,

Does this only fail when you use UserId %%CLIENT%%? That seems strange
to me.

In your fastcgi.conf file, it specifies an IpcDir (location where fastcgi looks for sockets that communicate with the php-cgi.bin program). I think the default is /www/zendsvr/logs

Have you verified that the user has authority to those sockets?

-SK



On 12/13/2012 4:53 PM, Peter Connell wrote:

Installed ZendServer 5.6.0
A simple HelloWorld.php script runs OK.
But when Apache config specifies authentication using an i5 user profile, e.g.

Require valid-user
PasswdFile %%SYSTEM%%
UserID %%CLIENT%%
AuthType Basic

Simple HelloWorld scripts fails with HTTP 500 error Apache error log
shows the following error Can not connect() to
/usr/local/ZendSvr/bin/php-cgi.bin (0.0) - [3401] Permission denied

Tried granting all sorts of authorities but still no joy.
Only works if i5 user has *ALLOBJ.

Peter



######################################################################
###############

This correspondence is for the named person's use only. It may contain
confidential or legally privileged information, or both. No
confidentiality or privilege is waived or lost by any mistransmission.
If you receive this correspondence in error, please immediately delete
it from your system and notify the sender. You must not disclose, copy or rely on any part of this correspondence if you are not the intended recipient.
Any views expressed in this message are those of the individual
sender, except where the sender expressly, and with authority, states them to be the views of Veda.
If you need assistance, please contact Veda on either :- Australia
1300-762-207 or New Zealand +64 9 367 6200

--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list To post a message email: WEB400@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at http://archive.midrange.com/web400.

#####################################################################################

This correspondence is for the named person's use only. It may contain confidential
or legally privileged information, or both. No confidentiality or privilege is waived
or lost by any mistransmission. If you receive this correspondence in error, please
immediately delete it from your system and notify the sender. You must not disclose,
copy or rely on any part of this correspondence if you are not the intended recipient.
Any views expressed in this message are those of the individual sender, except where
the sender expressly, and with authority, states them to be the views of Veda.
If you need assistance, please contact Veda on either :-
Australia 1300-762-207 or New Zealand +64 9 367 6200