Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 2 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 22nd May 2008, 13:18
togme togme is offline
Junior Member
 
Join Date: Mar 2008
Posts: 2
Thanks: 0
Thanked 0 Times in 0 Posts
Default 3 Problems with user rights and apache rights

Hi out there,

I have the following three problems:

1. rights in /var/www/webx/web are set to world-readable
--> this means all joomla-admin-users can install joomla-Explorer and can read the configuration.php and see the db-password et.al.
2. apache runs as www-data while the domain-groups are set to webX (/var/www/web/...) --> if the instance starts as a user in group webX then the first questions is solved (I think) if and only if ispconfig sets the rights in the correct way?
3. webX-Users are often deleted and new created so that these users are also deleted in manually created unix-groups.
I have a subversion group an would like to add some users which in turn get rights to read and write to specific repositories.

I think #1 has #2 as reason --> is it possible to run apache as user for each domain instead of www-data and create the rights accordingly?

Is it possible to patch ispconfig not to delete users so that they persist in own unix-groups?

I have searched and googled a lot but don't really understand the influence of apache-configuration on ispconfig.

Is there a solution for my problems - or a workaround?

many thanx in advance for any suggestions!

Thomas
Reply With Quote
Sponsored Links
  #2  
Old 22nd May 2008, 19:06
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,421
Thanks: 834
Thanked 5,500 Times in 4,329 Posts
Default

This is a common problem in shared hosting enviroments, one answer is to use suphp:

http://www.howtoforge.com/install-su...2.20-and-above
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 7th June 2008, 13:37
togme togme is offline
Junior Member
 
Join Date: Mar 2008
Posts: 2
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Thanx Till,

suphp will help for php. Does it also solve the world-readable problem?

how can I solve the disappearing of ispconfig-users in own unix groups?

(Sorry for the late reply, I've been ill a longer time :-( )

TIA

Thomas
Reply With Quote
  #4  
Old 8th June 2008, 12:02
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,421
Thanks: 834
Thanked 5,500 Times in 4,329 Posts
 
Default

After you installed suphp, the suers will not be able anmore to "leave" their home directory with a php script.

Quote:
how can I solve the disappearing of ispconfig-users in own unix groups?
ISPConfig users can not be added to custom groups. If you want to change this behaviour, you would have to rewrite the way that ISPConfig manages the system users.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
issue with no admin user allocated djtremors General 8 14th September 2006 09:50
Php with Apache rights, not vhost rights BenDaDon Installation/Configuration 3 8th January 2006 18:24


All times are GMT +2. The time now is 21:22.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.