#1  
Old 5th February 2012, 10:09
Eusebius Eusebius is offline
Junior Member
 
Join Date: Feb 2012
Posts: 3
Thanks: 0
Thanked 0 Times in 0 Posts
Default Primary group of shell users

Hi.

I have some trouble configuring my shell users so that everything works smoothly.

By default, when I create a SSH user for a website, the primary group seems to be the client ID ("client1"). Of course, that makes the newly created files unreadable/writeable by Apache. How can I set the primary group of all my (newly created?) shell users to www-data?

Also, even if I change the owner of a file (inside a website directory) while being root, when I log in through the jailed shell account, I don't see the group name, only its number. Is it a problem or not regarding my issue?

Thanks in advance!
Reply With Quote
Sponsored Links
  #2  
Old 5th February 2012, 14:03
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,446
Thanks: 813
Thanked 5,213 Times in 4,088 Posts
Default

Your problem are the website settings and not he shell user group. Edit the website settings and ensure that suexec is enabled and that you use php fcgi as ohp mode, so all files get created with the correct user snd group by apache.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 5th February 2012, 14:35
Eusebius Eusebius is offline
Junior Member
 
Join Date: Feb 2012
Posts: 3
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by till View Post
Your problem are the website settings and not he shell user group. Edit the website settings and ensure that suexec is enabled and that you use php fcgi as ohp mode, so all files get created with the correct user snd group by apache.
Thanks for the advice, I'll try. However, I am quite certain that administrators not wanting to use suexec for security reasons, or fastCGI for performance reasons, have a way to do so? Otherwise ISPconfig wouldn't give a choice.

It is pretty easy, outside ISPconfig, to assign a primary group to a user. Since ISPconfig creates user accounts, I'd like to know whether there is a way to make it take care of the group assignment? Otherwise, it would be much easily acceptable for me to script it on the server (outside ISPconfig) than to use fastCGI.

Thanks again for your response, and thanks in advance to anyone with an insight about the issue.
Reply With Quote
  #4  
Old 6th February 2012, 09:42
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,446
Thanks: 813
Thanked 5,213 Times in 4,088 Posts
Default

Quote:
However, I am quite certain that administrators not wanting to use suexec for security reasons, or fastCGI for performance reasons, have a way to do so?
I'am quite sure all admins that do professional hosting do it Suexec should always be used for security reasons to run scripts under the user of the website so that all sites and scripts are separated security wise and fastcgi (dont mix up with cgi) is as fast as mod_php.

The way you want to configure the system is quite insecure as it would allow a infected php script in a website to infect all other websites and thats why ispconfig does not offer it as option. If you like to do your insecure configuration, you will have to change the sourcecode or use a different controlpanel.

Quote:
Otherwise ISPconfig wouldn't give a choice.
The choice is there for contact forms and other scripts that dont have to write to the website.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 6th February 2012, 10:19
Eusebius Eusebius is offline
Junior Member
 
Join Date: Feb 2012
Posts: 3
Thanks: 0
Thanked 0 Times in 0 Posts
 
Default

Hi, thanks again for your valuable explanations. There clearly was something that I hadn't understood when reading about suexec, and I actually mixed up suExec+FastCGI with suPHP.

Most clearer now, thanks.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
ISPConfig Users Permissions guimnk Installation/Configuration 14 14th April 2011 18:26
Can't access to my website - after install problem pallermo Installation/Configuration 18 4th June 2010 13:29
Courier POP3 HiJacker Installation/Configuration 14 17th November 2009 13:29
Cacti and ISPConfig: Monitoring Tool VMartins Tips/Tricks/Mods 11 9th August 2008 18:37
Junk mail and spamassassin... sthompson Installation/Configuration 4 27th December 2006 16:11


All times are GMT +2. The time now is 20:49.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.