The mailing list for listmasters using Sympa

[Phil Stracchino <address@concealed>]

On 5/26/23 16:12, VTR wrote:
> Thanks Phil. I installed spawn-fcgi and can now see the Apache test page 
> on the top level of my webpage. But adding /sympa to the address, I get 
> Forbidden, you don’t have permission to access this resource.

OK, so take this stanza config (which you need to add to your Apache 
configuration if you haven't already) ...

      ScriptAlias /sympa /usr/libexec/sympa/wwsympa.fcgi
      Alias /static-sympa /var/spool/sympa/static_content

      <Location /sympa>
         SetHandler "proxy:unix:/var/run/sympa/wwsympa.socket|fcgi://"
         Options +ExecCGI
         Require all granted
      </Location>

      <Location /static-sympa>
         Require all granted
      </Location>

and modify it to reflect what your actual locations are.  That should 
solve the 403 Forbidden.

You also need to check that the filesystem permissions on all of the 
sympa files make them readable by your fcgi/apache user(s).  There is a 
section somewhere in the documentation on required file permissions.


> —
>
> This is my wwsympa.service file:
>
> $ cat wwsympa.service
> [Unit]
> Description=Sympa web interface FastCGI backend
> After=sympa.service
> Requires=wwsympa.socket
>
> [Service]
> User=sympa
> Group=sympa
> ExecStart=/usr/bin/multiwatch \
>            -f $WWS_FCGI_CHILDREN -- \
>            /usr/libexec/sympa/wwsympa.fcgi
> StandardOutput=null
> StandardInput=socket
> StandardError=journal
> Environment="WWS_FCGI_CHILDREN=5"
> EnvironmentFile=-/etc/default/sympa
> EnvironmentFile=-/etc/sysconfig/sympa
> Restart=always
> RestartSec=5
>
> [Install]
> Also=wwsympa.socket
> WantedBy=multi-user.target
>
> —
>
> And this is my wwsympa.socket file:
>
> $ cat wwsympa.socket
> [Unit]
> Description=Sympa web interface socket
>
> [Socket]
> SocketUser=nobody
> SocketMode=0600
> ListenStream=/run/sympa/wwsympa.socket
>
> [Install]
> WantedBy=sockets.target
>
> I’m supposed to add FCGI_OPTS="-M 0600 -U www-data” somewhere but not 
> sure which file?


I do not run systemd and cannot advise you there, but someone else here 
(Soji-san, if nobody else) should be able to.  And be aware that 
'www-data' is NOT NECESSARILY the correct user.  Make that match 
whatever user Apache runs as.



--
  Phil Stracchino
  Babylon Communications
  address@concealed
  address@concealed
  Landline: +1.603.293.8485
  Mobile:   +1.603.998.6958