Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > MyDNSConfig > General

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 12th October 2010, 14:55
gdavid gdavid is offline
Junior Member
 
Join Date: Oct 2010
Posts: 19
Thanks: 0
Thanked 2 Times in 1 Post
Default Dangerous permission to ungroped new users

I found something strange adding new users in MyDNSConfig, but maybe I'm wrong.

Created a new user, giving him "user" privileges; assigned default group other than "admin"; NOT checked ANY of the Groups below the "Default Group" pull-up menu.
This user can access ALL the zones of the db !!!
Is it a normal beaviour?

Thanks to anybody can help me in understanding or fix this.

g
Reply With Quote
Sponsored Links
  #2  
Old 12th October 2010, 14:59
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 36,395
Thanks: 833
Thanked 5,490 Times in 4,322 Posts
Default

You can not create any users manually, users have to be created by adding a client. If you add a users or groups manually instead of adding a client, then the system priveliges for this user are broken as the client record which holds the limits for the user is missing.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 12th October 2010, 17:19
gdavid gdavid is offline
Junior Member
 
Join Date: Oct 2010
Posts: 19
Thanks: 0
Thanked 2 Times in 1 Post
Default

mmm ... I'not sure I well understud. You mean the admin can't create group or users via the system tab? So, this area and their commands what are intended for?
I my short experience with MyDNS Config, this tools to manage users and groups work wery well, excep for the fact i mentioned in my first post: Default group assignment doesn't assign the group too.
Simply, If I remember to assign both (default group AND group) everything seems to work fine.
Now I will carefully check what you wrote about limits, and see if could be a problem. In my whishes is not to create a group without client, but many users belonging to the same group (=client?)
This is not a requirments, of course. I can work without System Tab. But if it is there ... I'll try to do the best with it
Many thanks for you reply. Helped so much in avoid future db problems.

g
Reply With Quote
  #4  
Old 12th October 2010, 17:27
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 36,395
Thanks: 833
Thanked 5,490 Times in 4,322 Posts
Default

Quote:
So, this area and their commands what are intended for?
They are only there to create other administrators and not users as adminstrators have no limits.

Quote:
I my short experience with MyDNS Config, this tools to manage users and groups work wery well
Thats indeed the case as this is the permission system of ispconfig. The problem with creating a group manually is that you break the link to the client record which holds the actual limits. If you take a look in the sys_group database table, you can find there a field client_id which is 0 when you have created this group manually. If the system is not able to find the client for a given group when records are created, then the creation of dns records and zones may fail.

The group functions have also been removed in the meantime from the code, so the next mydnsconfig release will not have that area anymore to avoid such problems.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 12th October 2010, 19:11
gdavid gdavid is offline
Junior Member
 
Join Date: Oct 2010
Posts: 19
Thanks: 0
Thanked 2 Times in 1 Post
Default

Much more clear now. Thanks. I'll definitely stop using groups and users.
Thank you so much for your great work.
g
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
SugarCRM Install on ISPConfig3 w/ SuPHP clucena Installation/Configuration 1 9th February 2010 09:29
ISP Config hesitation when opening web pages frankb Installation/Configuration 7 15th December 2008 13:06
Cacti and ISPConfig: Monitoring Tool VMartins Tips/Tricks/Mods 11 9th August 2008 18:37
Junk mail and spamassassin... sthompson Installation/Configuration 4 27th December 2006 16:11
Verify email setup meekish Installation/Configuration 28 27th October 2006 15:36


All times are GMT +2. The time now is 23:41.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.