Installation comments

Hi, everyone.

I just installed 3.2.1 and ran into a pretty trivial gotcha. After
installation, etc/RT_Config.pm had the mode 550 (perhaps because of my
umask?). This meant it wasn’t readable by the unprivileged user that
Apache was running under. And that caused the scripts not to work.

While I’m at it, here are two really minor nits:

  • The README file and the wiki docs don’t mention that you’re
    supposed to install the FCGI perl module when running under
    FastCGI. (Should I add this to the wiki?)

  • I couldn’t get RT to install as a non-root user (since the chowns
    fail, of course). It would be nice if you could.

If this is the wrong place to mention these, please set me straight.

Loads of thanks to Jesse and all the contributors!
–bert

After
installation, etc/RT_Config.pm had the mode 550 (perhaps because of my
umask?). This meant it wasn’t readable by the unprivileged user that
Apache was running under. And that caused the scripts not to work.

Most likely that means you didn’t pass the proper groups to configure with the --with-web-group and --with-web-user switches.

  • The README file and the wiki docs don’t mention that you’re
    supposed to install the FCGI perl module when running under
    FastCGI. (Should I add this to the wiki?)

Go for it. That is the point of a wiki after all.

Michael
Michael S. Liebman m-liebman@northwestern.edu
http://msl521.freeshell.org/
“I have vision and the rest of the world wears bifocals.”
-Paul Newman in “Butch Cassidy & the Sundance Kid”

“Michael S. Liebman” m-liebman@northwestern.edu writes:> On Mon, Jul 26, 2004 at 01:27:41PM -0400, Albert Dvornik wrote:

After installation, etc/RT_Config.pm had the mode 550 (perhaps
because of my umask?). This meant it wasn’t readable by the
unprivileged user that Apache was running under. And that caused
the scripts not to work.

Most likely that means you didn’t pass the proper groups to
configure with the --with-web-group and --with-web-user switches.

Hmmmm, you almost had me convinced until I looked at the makefile.
The “fixperms” make target runs:

    chown -R $(BIN_OWNER) $(DESTDIR)/$(RT_ETC_PATH)
    chgrp -R $(RTGROUP) $(DESTDIR)/$(RT_ETC_PATH)

    chmod 0550 $(DESTDIR)/$(CONFIG_FILE)
    chmod 0550 $(DESTDIR)/$(SITE_CONFIG_FILE)

to explicitly set the ownership (to --with-bin-owner and
–with-rt-group) and permissions.

Older documentation implies that the FastCGI handler should be running
in the “rt” group, which would (perhaps) solve this. But my
mason_handler.fcgi script hasn’t been installed setgid. Is this
wrong? Or maybe that was changed (the makefile.in doesn’t seem to say
anything about chmod’ing things setgid)?

–bert

Older documentation implies that the FastCGI handler should be running
in the “rt” group, which would (perhaps) solve this. But my
mason_handler.fcgi script hasn’t been installed setgid. Is this
wrong? Or maybe that was changed (the makefile.in doesn’t seem to say
anything about chmod’ing things setgid)?

Have a look in the UPGGRADING file. We don’t do setgid anymore.

Jesse

Older documentation implies that the FastCGI handler should be running
in the “rt” group, which would (perhaps) solve this. But my
mason_handler.fcgi script hasn’t been installed setgid. Is this
wrong? Or maybe that was changed (the makefile.in doesn’t seem to say
anything about chmod’ing things setgid)?

With 3.2.0, the recommendations for installing a FastCGI instance
changed. There were numerous issues with running setgid. The current
recommendations suggest installing all of RT as the web user or
running suexec. I think most people have chosen suexec. I’m not sure
if you looked at
http://wiki.bestpractical.com/index.cgi?FastCGIConfiguration which is
much more up to date than
http://wiki.bestpractical.com/index.cgi?FastCGIFAQ

Michael
Michael S. Liebman m-liebman@northwestern.edu
http://msl521.freeshell.org/
“I have vision and the rest of the world wears bifocals.”
-Paul Newman in “Butch Cassidy & the Sundance Kid”