Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > ISPConfig 3 Priority Support

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 19th July 2013, 02:10
jlscott jlscott is offline
Junior Member
 
Join Date: Oct 2009
Posts: 5
Thanks: 1
Thanked 0 Times in 0 Posts
Question Strange behaviour for new sites - CentOS6.4

I have a Centos server that has been upgraded from CentOS6.3 to 6.4, and more recently to ISP Config 3.0.5.2.

I find that since the ISP Config upgrade, that any new sites I create are implemented differently, and are effectively unusable as I cannot create files/directories in the web folder, even when logged in as 'root'.
Quote:
[root@rigel client4]# ls -al web33
total 840
drwxr-x--x 8 web33 client4 4096 Jul 16 16:25 .
drwxr-xr-x 13 root root 4096 Jul 19 09:43 ..
drwxr-x--x 2 web33 client4 4096 Oct 28 2012 cgi-bin
drwx--x--- 8 web33 client4 4096 Jun 10 17:06 drupal-7.21
lrwxrwxrwx 1 root root 41 Oct 28 2012 log -> /var/log/ispconfig/httpd/enter.ohv.org.nz
drwxr-x--x 4 web33 client4 4096 Oct 28 2012 orig-web
drwxr-x--x 2 web33 client4 4096 Oct 28 2012 ssl
-rwxr-x--x 1 root root 825411 Sep 20 2012 tinymce_3.5.7.zip
drwxrwxrwx 2 web33 client4 4096 Jul 19 08:38 tmp
drwxr-xr-x 11 web33 client4 4096 Jun 10 17:06 web
[root@rigel client4]# ls -al web42
total 36
drwxr-xr-x 9 root root 4096 Jul 19 09:13 .
drwxr-xr-x 13 root root 4096 Jul 19 09:43 ..
drwxr-xr-x 2 web42 client4 4096 Jul 19 09:13 cgi-bin
drwxr-xr-x 2 root root 4096 Jul 19 09:13 log
drwx--x--- 2 web42 client4 4096 Jul 19 09:13 private
drwxr-xr-x 2 root root 4096 Jul 19 09:13 ssl
drwxrwxrwx 2 web42 client4 4096 Jul 19 09:13 tmp
drwx--x--- 4 web42 client4 4096 Jul 19 09:13 web
drwx--x--- 2 web42 client4 4096 Jul 19 09:13 webdav
[root@rigel client4]#
Note that the web42 folder is owned by root and is in root group, as is the log sub-directory (which is a symbolic link in the older working site web33).

I cannot change the ownership or group of the web42 directory, nor can I create any files/folders within it, even when logged in as root.
Quote:
[root@rigel client4]# chgrp client4 web42
chgrp: changing group of `web42': Operation not permitted
[root@rigel client4]# chown web42 web42
chown: changing ownership of `web42': Operation not permitted
[root@rigel client4]# mkdir web42/zzz
mkdir: cannot create directory `web42/zzz': Permission denied
[root@rigel client4]# touch web42/xxx
touch: cannot touch `web42/xxx': Permission denied
[root@rigel client4]#
I can do all of these actions with the older web33 site.

SElinux is disabled on this machine.

I have the same behaviour on a newer server that had CentOS6.4 installed from the start, along with ISP Config 3.0.5.2.

I cannot see any differences between the web33 and web42 directories using lsattr or getfacl commands.

Any ideas that will assist me in solving this problem would be greatly appreciated. Please ask for any additional information that might help to determine the cause of the problem.

Thanks.

PS - uname details are:
Quote:
[root@rigel client4]# uname -a
Linux rigel.mainspring.co.nz 2.6.32-358.11.1.el6.x86_64 #1 SMP Wed Jun 12 03:34:52 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux
[root@rigel client4]#
Reply With Quote
Sponsored Links
  #2  
Old 19th July 2013, 10:23
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 36,804
Thanks: 840
Thanked 5,614 Times in 4,425 Posts
Default

Quote:
I find that since the ISP Config upgrade, that any new sites I create are implemented differently, and are effectively unusable as I cannot create files/directories in the web folder, even when logged in as 'root'.
Thats correct and the intended behaviour. The behaviour has been changed to protect the folders from being manipulated by clients.

All folders were files may be uploaded to are still writable of course.

Files that shall be visible in the website shall uploaded to the "web" folder. Files that shall be kept private go into the folder "private".

If you still want to create a flder as root user in the web root, then you have to remove the protection first with e.g.:

chattr -i /var/www/clients/client1/web1

and after you created the folder apply the protection again:

chattr +i /var/www/clients/client1/web1
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 19th July 2013, 13:23
jlscott jlscott is offline
Junior Member
 
Join Date: Oct 2009
Posts: 5
Thanks: 1
Thanked 0 Times in 0 Posts
Default

Thanks Tell. However, the previous configuration worked well for me and suited my workflow. If I had known the change I would probably not have upgraded ISP Config. I will now need to rethink how I can use the system effectively.

Also, can you please advise where the log files for each virtual website will go as the "log" entry in folder "/var/clients/clientx/webyy" is no longer a symbolic link to a directory under "/var/log/ispconfig/httpd/"?

Regards,

James
Reply With Quote
  #4  
Old 19th July 2013, 13:34
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 36,804
Thanks: 840
Thanked 5,614 Times in 4,425 Posts
Default

You can disable the folder protection under System > server config > web.

Quote:
Also, can you please advise where the log files for each virtual website will go as the "log" entry in folder "/var/clients/clientx/webyy" is no longer a symbolic link to a directory under "/var/log/ispconfig/httpd/"?
The log files are still in /var/log/ispconfig/httpd/. The symbolic link has been replaced with a bind mount as the symlink did not worked for jailed ssh users.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
The Following User Says Thank You to till For This Useful Post:
jlscott (19th July 2013)
  #5  
Old 19th July 2013, 13:54
jlscott jlscott is offline
Junior Member
 
Join Date: Oct 2009
Posts: 5
Thanks: 1
Thanked 0 Times in 0 Posts
 
Default

Thanks Tell. There appear to be a lot of new system configuration options available. I will need to study the documentation to understand them, so I can configure my system to best meet my needs (taking into account the intended security and other benefits that have been built in).

Regards,

James
Reply With Quote
Reply

Bookmarks

Tags
centos 6.4

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Strange directory structure in ispconfig 3 sites bruma General 2 9th June 2011 14:31
ProFTPD - Strange behaviour - double config? skara Server Operation 4 19th September 2007 16:15
Move Sites strange behaviour? wr19026 General 3 12th August 2006 18:53
Strange Behaviour ratebri General 2 30th November 2005 12:57
Strange behaviour of foreach in PHP 4.3.11 minimi Programming/Scripts 3 30th May 2005 20:20


All times are GMT +2. The time now is 10:57.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.