Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:73053
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain inbox.ru designates 94.100.177.90 as permitted sender)
Date: Mon, 10 Mar 2014 21:31:22 +0400
Message-ID: <343525739.20140310213122@inbox.ru>
To: internals@lists.php.net
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Subject: PHP as FastCGI Authorizer
From: ant_mail@inbox.ru (Anthony Pankov)

Dear All!

Is there any chance to use php as FastCGI authorizer?

As  i see, php-fpm has no options to use predefined script and support
only Responder role.

I tried php-cgi as authorizer as following:
1.  Configure  apache  to  use php-cgi as FastCGIServer (php-cgi under
FastCGI  process  management),  than  start  php-cgi  as  "php-cgi  -f
.../authscript.php".

I see this in sapi/cgi/cgi_main.c line 2246:
                            if (script_file) {
                                        /* override path_translated if -f on command line */
So i used -f switch.

There no output (including errors) in any log and no evidence that script was launched.

May be there is a broken magic in determination of fastcgi mode:
sapi/cgi/fastcgi.c
                if (getpeername(0, (struct sockaddr *)&sa, &len) != 0 && errno == ENOTCONN) {
                        fcgi_setup_signals();
                        return is_fastcgi = 1;
                } else {
                        return is_fastcgi = 0;
                }

Because of  fcgi_listen contain unambiguous:
 is_fastcgi = 1;

 i  tried next variant:

2.  Configure   apache   to  use php-cgi as FastCGIExternalServer. Php
used as
 "php-cgi  -b .../gsock -f .../authscript.php"

 Socket is created, FastCGI report that connection is done.
 But, again, no output in any log and no evidence that script was launched.

 In every apache configuration  script included as FastCGIAuthorizer , of course.

 Any suggestion?



-- 
Best regards,
 Anthony                          mailto:ant_mail@inbox.ru