Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > Developers' Forum

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 19th June 2007, 16:18
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,461
Thanks: 813
Thanked 5,240 Times in 4,108 Posts
Default ISPConfig 3 questions

Hi,

I'am just searching for the best folder layout for ISPConfig for the websites. My Idea is to implementing it like this:

/var/clients/client[client_id]/web[website_id]/

And then have 2 symlinks for easier shell navigation:

/var/www/[website_domain]/ => /var/clients/client[client_id]/web[website_id]/
/var/clients/client[client_id]/[website_domain]/ => /var/clients/client[client_id]/web[website_id]/

Example:

A website "www.mydomain.com" which has the internal ID 22 and belongs to the customer with the ID 5.

Directory:

/var/clients/client5/web22/

Symlinks:

/var/www/www.mydomain.com/ => /var/clients/client5/web22/
/var/clients/client5/www.mydomain.com/ => /var/clients/client5/web22/

Please post your Ideas and comments on this.

A second question:

a) Shall we create a sytem user for every client, so all websites of a client belong to the same linux user.
b) Shall there be a system user for every website and a linux group for the client. All website users of this client belong to the group of the client.

My preference is b)
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
Sponsored Links
  #2  
Old 22nd June 2007, 21:14
bagpiperdude90 bagpiperdude90 is offline
Member
 
Join Date: Mar 2007
Posts: 34
Thanks: 4
Thanked 22 Times in 5 Posts
Default

I like the idea of the folder layouts.

However, for the system users and groups... I don't see why option b would be better than a. To me, it looks like all we do is add some more users and groups, but, what would I see on my end, or the client see on his end, that would be improved by that?

Or is it just for organization?
Reply With Quote
  #3  
Old 25th June 2007, 09:12
melwood melwood is offline
Member
 
Join Date: Jun 2007
Location: Edling, Germany
Posts: 37
Thanks: 5
Thanked 1 Time in 1 Post
Default

Quote:
Originally Posted by till

/var/clients/client[client_id]/web[website_id]/

a) Shall we create a sytem user for every client, so all websites of a client belong to the same linux user.
b) Shall there be a system user for every website and a linux group for the client. All website users of this client belong to the group of the client.

My preference is b)
If I assign more then one website to one use, why would I want more than one system user? This only complicates things for the end-user.

If a user needs more freedom he needs to be a reseller.

Please make it simple for the end-user!

So I definitely prefer option a)

For the directory structure:

Why not use "/var/clients/client[client_id]/[website_domain]/" also? It's much more human readable.

melwood

Last edited by melwood; 25th June 2007 at 09:18.
Reply With Quote
  #4  
Old 25th June 2007, 11:50
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,461
Thanks: 813
Thanked 5,240 Times in 4,108 Posts
Default

Quote:
If I assign more then one website to one use, why would I want more than one system user?
Thats a question of security. If one client has lets say 20 websites and all websites have the same user, then he will loose 20 sites if one of the sites get hacked e.g. trough a insecure forum or cms system. If every site has its own system user, only one site will be affected.

The drawback is that the user will have to use a separate FTP login for every site, but this can be circumvented if the user says that he wants to access all sites with one user, he can make the files group writable for the client group.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 25th June 2007, 12:00
melwood melwood is offline
Member
 
Join Date: Jun 2007
Location: Edling, Germany
Posts: 37
Thanks: 5
Thanked 1 Time in 1 Post
Default

Quote:
Originally Posted by till
The drawback is that the user will have to use a separate FTP login for every site, but this can be circumvented if the user says that he wants to access all sites with one user, he can make the files group writable for the client group.
If it is possible to access all sites with one ftp-account then go for option b)

melwood
Reply With Quote
  #6  
Old 30th October 2007, 09:05
bpssoft bpssoft is offline
Banned
 
Join Date: Apr 2006
Posts: 11
Thanks: 2
Thanked 1 Time in 1 Post
Default

I prefer this:

/var/www/www.mydomain.com/ => /var/clients/client5/web22/
But is the following also possible?
/var/www/[client_username]/[domain]/ ?

And choose B is better, because security issues.
Reply With Quote
  #7  
Old 30th October 2007, 21:32
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,461
Thanks: 813
Thanked 5,240 Times in 4,108 Posts
Default

b) is the current implementation and the symlinks are configurable.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #8  
Old 31st October 2007, 21:46
satommy satommy is offline
Junior Member
 
Join Date: Oct 2007
Posts: 9
Thanks: 0
Thanked 3 Times in 2 Posts
Default

Hey

Human readable would be great for the webdirs.
Maybe using a chrooted jail for the shell access is an option??

Further on I discovered a small mistake in the wblist php file. I have not yet used a svn upload ever, so can anyone tell me how to, or can I upload the files or the mistake anywhere else?

Thnx
Reply With Quote
  #9  
Old 31st October 2007, 22:19
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,461
Thanks: 813
Thanked 5,240 Times in 4,108 Posts
Default

Quote:
Maybe using a chrooted jail for the shell access is an option??
This will be avilable as option and it isrecommended to use it. But as the common linux distribution have no sshd which supports chrooting by default, we can not make this the defualt option.

Quote:
Further on I discovered a small mistake in the wblist php file. I have not yet used a svn upload ever, so can anyone tell me how to, or can I upload the files or the mistake anywhere else?
If you use windows on your desktop, tortoesesvn is a nice SVN client which integrates perfectly into the file explorer.

You may also post the cahnged lines from the wblist file here, if it is just a minor change.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #10  
Old 1st November 2007, 13:02
satommy satommy is offline
Junior Member
 
Join Date: Oct 2007
Posts: 9
Thanks: 0
Thanked 3 Times in 2 Posts
 
Default

The php mistake I found was in the spamfilter files. So users could not edit there spam white, and blacklists. the word "limit_" was written twice.

Bothe files the same line:

spamfilter_whitelist_edit.php
spamfilter_blacklist_edit.php

line 66:

was:

if($client["limit_limit_spamfilter_wblist"] >= 0) {

has to be:

if($client["limit_spamfilter_wblist"] >= 0) {
Reply With Quote
The Following User Says Thank You to satommy For This Useful Post:
till (1st November 2007)
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Multiple ISPConfig & DNS Questions and Problems bfriend Installation/Configuration 3 6th January 2007 06:14
4 questions about ispconfig and domains, please help! dimas Installation/Configuration 7 1st August 2006 11:55
SP-Server Setup - Ubuntu 5.10 "Breezy Badger" - Page 6 (changes) LuisC-SM HOWTO-Related Questions 0 21st April 2006 15:16
Users and websites aren't created Glorfindel Installation/Configuration 9 23rd February 2006 04:20
General ISPConfig Newbie Questions christopher Installation/Configuration 1 24th November 2005 09:54


All times are GMT +2. The time now is 23:01.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.