Topic: Help: FastCGI+Win2003+Apache - can't get fastcgi file info

[istarbuxs]

Hi guys, I would like to know what error I'm having here. I have tried all the security thing on the said folder, and yet I still get this error.

I currently installed Xampp and then installed a non-thread safe PHP on another folder. as you can see below

C:\xampp\apache\bin>httpd.exe -t
Syntax error on line 539 of C:/xampp/apache/conf/httpd.conf:
can't get fastcgi file info: c:/PHP-NTS/php-cgi.exe(c:/PHP-NTS/php-cgi.exe), err
no: 720997

I also saw on the forum that the error 997 has something to do with the Group Policy thing. There's nothing saved inside the "control keymgr.dll" so there's nothing to delete.


Here's my settings

LoadModule fcgid_module modules/mod_fcgid.so
<IfModule mod_fcgid.c>

IPCCommTimeout 40
IPCConnectTimeout 10
MaxProcessCount 8
OutputBufferSize 64
ProcessLifeTime 240
MaxRequestsPerProcess 500
SetEnv PHPRC "C:/PHP-NTS"
DefaultInitEnv TEMP "C:/WINDOWS/TEMP"
DefaultMinClassProcessCount 0

Alias /fcgi/ "c:/PHP-NTS/"
<Directory c:/PHP-NTS>
AddHandler fcgid-script .php
Options Indexes FollowSymLinks ExecCGI
FCGIWrapper "c:/PHP-NTS/php-cgi.exe" .php
AllowOverride all
Order allow,deny
Allow from all
Satisfy any
</Directory>

</IfModule>

[istarbuxs]

Windows 2003 Service Pack 2
Running Apache 2.2.8

installed mod_fcgid 2.2a

[James Blond]

I had the same error as well (same OS). I switched to VS6 build and everything runs fine. No clue why but I didn't got the VS9 build to run.

For me runs VC6 x86 Thread Safe (2009-Jun-30 08:52:55) and VC6 x86 Non Thread Safe (2009-Jun-30 08:52:54) from http://windows.php.net/download/

[istarbuxs]

Is there a way for the FastCGI module to stop querying the Active Directory?

I think this is the problem why it won't run on Windows machine having AD on them.

[James Blond]

Every file access from a process queries the AD (if installed) for the permissions. I had no problem on a machine with AD and fcgid. The problem is the compiler version not AD.

[istarbuxs]

The thing is a group policy on the AD is overriding our permissions. That's why that error comes up.

What do you mean by a different compiler version?

[James Blond]

On windows.php.net there are PHP compiled with Visual Studio 6 (VS6) and compiled with Visual Studio 9 (VS9 aka VS 2008). And there are some non thread safe (NTS) version also compiled with VS6 and VS9. For only the VS6 thread safe versions works over fcgid.

OK normaly fcgid should run with NTS version as your tried to use

[istarbuxs]

Still doesn't work.

It works perfectly on a domain account but on a local account, it won't work.

[James Blond]

Do you run apache in the console or as service? What exactly fails on the local account? Starting?
Since you are using XAMPP, did you secure it?

[istarbuxs]

We ran it as a service.

What fails? We can't start apache with the FCGI module.

We used procmon/regmon to monitor the activity, I think it has something to do with the SAM files.

By securing XAMPP, what do you mean?

Another thing is when i tried NginX on the same box using FCGID, it works fine.

So I'm not sure with Apache

[twosouth]

Hi:

I'm getting this as well on a Win2K3 install. I'm not having any luck getting around it.

can't get fastcgi file info: d:/php5.2.12_vc6/php-cgi.exe(d:/php5.2.12_vc6/php-cgi.exe), errno: 720997

[halfer]

A parallel discussion appears on this thread also.

[halfer]

I tried downloading the various versions again of 5.2.10: php-5.2.10-nts-Win32-VC6-x86 and php-5.2.10-Win32-VC6-x86. Turns out I was using the thread-safe ones already... and this made no difference.

However thanks to @istarbuxs I've found that changing the service account from local to my windows domain credentials, it starts OK again. Since this is only a dev laptop, I am happy to leave it as it is.

Of course if someone could shed any more light on this - particularly on how to get it to run under the local account again - that would be most interesting.

[twosouth]

I've toyed with Security permissions both on the actual service as well as on php-cgi.exe. Here's what I'm getting now:

[halfer]

OK, you might be part of the way there, consdering your error is now different. Have you tried that in combination with VC6 binaries?

[halfer]

Unfortunately the solution I previously provided stopped working for me. I have now upgraded to 2.2.15, and this ran under the system account only until the next reboot, and something stopped it working. I have reset the account to use my named AD credentials, and it works again. (It may have been sufficient to reinstall the version of Apache I was previously using, but there's no harm in getting the latest and greatest.)

This is frustrating, as it means I can't use Apache unless I am on my corporate LAN - can do so at home but requires a dial-up to the internet and then to the LAN via VPN. We're now migrating to RHEL, and it's this sort of thing that provides the reason why (performance and TCO as well). I am stuck on Windows for my dev environment, but will switch to Ubuntu inside VirtualBox in due course!

</rant>

[glsmith]

<rant-reply>
That is the pain with installers, they uninstall the service the install it again.
If you are using .msi installer, extract to a temp folder and just overwrite
/bin /modules with the new files extracted from the .msi. You have to only stop the service.

see Steffen's post here
http://www.apachelounge.com/viewtopic.php?t=2060

The only downside is in the Services Dialog it will show the version when the service was installed in the description. But that's not a big deal, I run 2.2.15 but the services dialog says 2.2.9, but I never have to change the login for the service back to it's user.

[Brian White]

You can use SC to change the description using the following syntax:

sc <server> description [service name] [description]

e.g.
sc description Apache2.2 "Apache/2.2.15 (Win32) mod_ssl..."

Also, (depending on its configuration) Apache updates the service description every time that it starts.

[glsmith]

Yes on using sc.exe ... comes in handy for a number of tasks.
As far as Apache updating it's description, that has never been my experience. Specific config that will allow this is?

Not that I really care what the service description says, I only care what server_signature/server_software environment variables say, they tell what is truly under the hood, provided they have not been change by mod_security or gutted down to simply Apache2.2 with server token directive.

[daibach]

@halfer

Sounds like you're hitting this bug:

https://issues.apache.org/bugzilla/show_bug.cgi?id=51020

As that'll give the ominous 70008 partial results message.

You can either patch and recompile the module with a workaround given in that bug record. Or remove all non-local permissions (anything from AD, even AD users in local groups) from the php-cgi.exe. Only mess with the permissions on this file, don't worry about taking users out of groups or anything. Usually works perfectly if it just has SYSTEM and the local admin account (not the local admins group).