[OPEN-ILS-DOCUMENTATION] Opensrf user and group for Apache

[Lazar, Alexey Vladimirovich]

On Nov 7, 2012, at 15:45 , Dan Scott wrote:

> On Wed, Nov 07, 2012 at 09:33:33PM +0000, Lazar, Alexey Vladimirovich wrote:
>> Hello.
>> 
>> I was wondering if Apache for Evergreen still needs to run as
>> opensrf:opensrf, or if opensrf:www-data is now acceptable? Newer
>> installation instructions for 2.3, for example, only specify to change
>> APACHE_RUN_USER to opensrf, not the APACHE_RUN_GROUP.
>> 
>> Is anybody running Apache as opensrf:www-data, or is this an omission
>> in the documentation?
> 
> Conifer runs Apache as opensrf:www-data - I don't think it has ever
> needed to run as opensrf:opensrf, as long as either the group or the
> user have the ability to read and write to particular file locations.
> Perhaps you could point at the part of the documentation that concerns
> you?

Well, in that case there is nothing wrong with the current installation documentation in this regard:
Section 7.4: http://evergreen-ils.org/documentation/install/README_2_3.html#_configure_the_apache_web_server

Documentation for version 2.0 used to instruct to run apache both as opensrf user and opensrf group:
Section 12.d: http://docs.evergreen-ils.org/2.0/draft/html/serversideinstallation.html#serversideinstallation-ubuntudebian 

> The bug that you opened (https://bugs.launchpad.net/bugs/1054178) after
> the brief discussion at
> http://libmail.georgialibraries.org/pipermail/open-ils-general/2012-September/007471.html
> is tracking your request to try to remove the need for running Apache as
> the opensrf user (or group) at all, and
> https://bugs.launchpad.net/evergreen/+bug/1068912 offers one piece of
> that puzzle (albeit towards a larger overall goal).

I haven't seen that one. I can't wait until I can aptitude install evergreen.

Alexey Lazar
PALS
Information System Developer and Integrator
507-389-2907
http://www.mnpals.org/