Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > General

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 15th March 2011, 01:22
Toucan Toucan is offline
Senior Member
 
Join Date: Dec 2009
Posts: 479
Thanks: 78
Thanked 40 Times in 34 Posts
Default Squirrel mail ownership

Squirrel mail has possibly has it's ownership and permissions changed accidentally through a sym link. Can someone let me know who the correct owning user and group should be for squirrel please.

Last edited by Toucan; 15th March 2011 at 01:42.
Reply With Quote
Sponsored Links
  #2  
Old 15th March 2011, 15:53
falko falko is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,747 Times in 2,578 Posts
Default

On Debian Lenny, /usr/share/squirrelmail and all files/directories in it are owned by root:root.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
The Following User Says Thank You to falko For This Useful Post:
Toucan (16th March 2011)
  #3  
Old 16th March 2011, 18:47
Toucan Toucan is offline
Senior Member
 
Join Date: Dec 2009
Posts: 479
Thanks: 78
Thanked 40 Times in 34 Posts
Default

That answered my question well but hasn't cured the problem, which must mean my question is wrong!

If i access squirrel mail through myip/webmail it works fine. But if run it through symlink on a website it reports this error:
Error opening ../config/default_pref
Could not create initial preference file!
/var/lib/squirrelmail/data/ should be writable by user web24
Please contact your system administrator and report this error.

Recently I changed that site from modphp to fastcgi with suexec. I have removed the suexec option and squirrel mail does now work through it. Are there any implications using fastcgi without suexec?
Reply With Quote
  #4  
Old 16th March 2011, 18:50
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,717
Thanks: 840
Thanked 5,593 Times in 4,404 Posts
Default

Quote:
Are there any implications using fastcgi without suexec?
It renders the benefits of fastcgi vs. mod_php useless and is lesss ecure as all scripts will be run under the same user, so that it might be possible that one user accesses the scripts and files of other users.

For that reason, ispconfig is not creating webmail syminks in the website directories. They simply dont work in many situations.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 16th March 2011, 19:00
Toucan Toucan is offline
Senior Member
 
Join Date: Dec 2009
Posts: 479
Thanks: 78
Thanked 40 Times in 34 Posts
Default

Understood, hence when suexec was enforced the site and proceeding symlinks were being run under web24 user.

So if squirrel mail were accessed from a symlink of a site without suexec running, a potential harmful script could be included damaging both squirrel and the originating site?

If squirrel is accessed directly through the ip, what user is it ran under then?
Reply With Quote
  #6  
Old 17th March 2011, 19:34
falko falko is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,747 Times in 2,578 Posts
 
Default

If you use the IP, the default vhost jumps in, so it is the user of that vhost.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
The Following User Says Thank You to falko For This Useful Post:
Toucan (17th March 2011)
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Postfix problem and few questions Gimly Installation/Configuration 12 7th July 2009 17:27
Postfix + postfixadmin = SMTP errors... Rashef Server Operation 4 25th June 2009 17:12
just the last step...and it works. Postfix...need help config. ubuntusr Installation/Configuration 1 5th January 2009 10:50
Problem with dcc-client installation (Postfix) swap-as Installation/Configuration 9 18th September 2008 21:47
Core 4: Error Messages on Fresh Install re CTX/SSL jjw Installation/Configuration 30 6th September 2006 13:16


All times are GMT +2. The time now is 01:31.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.