Apache PHP DSO to LSWS migrating

[bloodyman]

Hi

I would like to migrate cPanel Apache + PHP as DSO server to LSWS.

The main reason is that I would like to allow users to run their PHP scripts as user:user (instead of nobody:nobody) to have Wordpress and other sites working properly. I would like to know if anyone experienced issues during changing Apache + PHP as DSO to LSWS on cPanel dedicated server with users?

[webizen]

should be ok. you can run LSWS (on port 2080) in paralell and enable PHP suEXEC to test.

[bloodyman]

Thanks for reply.

LSWS has many, many, many new settings for me, as *maybe* new user.

I read some part of documetation, but I would like to know if there are any security settings that should be setup after default installation of LSWS on cPanel shared server? I know how to manage and secure Apache, but I don't have any experience with LSWS. Of course after few months of running LSWS I would be able to tell something about LSWS, but I'm looking for any security tutorial for beginers.

[webizen]

LSWS default settings (install from cPanel plugin) should suit for shared hosting need.

here is more details:
http://www.litespeedtech.com/support...ing_securities

[bloodyman]

Hi

You refer to:

http://www.litespeedtech.com/support...ing_securities

There is information, that home user directories should be 770 or 750, while using EasyApache with Fileprotect on I have all user directories set to 711. Or article you have provided is not for cPanel Apache migration to Litespeed?

Another question - I have custom settings in httpd.conf:

<Directory "/">
Options -ExecCGI -FollowSymLinks +Includes +IncludesNOEXEC -Indexes -MultiViews +SymLinksIfOwnerMatch
AllowOverride AuthConfig FileInfo Indexes Limit Options=Includes,Indexes,MultiViews,FollowSymLinks ,ExecCGI
</Directory>

<Directory "/usr/local/apache/htdocs">
Options IncludesNOEXEC -Indexes -FollowSymLinks +SymLinksIfOwnerMatch -ExecCGI
AllowOverride None
Order allow,deny
Allow from all
<IfModule mod_access.c>
Order allow,deny
Allow from all
</IfModule>

</Directory>

Are they automatically migrated into Litespeed during cpanel apache migration (via WHM plugin)?

[webizen]

The document is not for migrating your server in particular but for how shared hosting environment should be in general since you asked for security tutorial. It does *NOT* mean yours (711 permission) will fail under LSWS.

Your custom settings in httpd.conf should be supported in LSWS.

Please note that LSWS reads Apache httpd.conf and behaves the same way as Apache (LSWS is Apache drop-in replacement). LSWS will not modify or create anything for Apache.

As pointed out earlier, you can take 15-day trial and have LSWS run in paralell with Apache and see if there is any issue for your environment.