Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 2 > General

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 12th July 2006, 05:40
rbartz rbartz is offline
Member
 
Join Date: Apr 2006
Posts: 80
Thanks: 9
Thanked 6 Times in 5 Posts
Default Directory Permissions

Tim and Falko, you guys are incredible!

We have some sites that use PHP programs that occassionally need to write files or save images to directories in /var/www/webXX/web/.

We have been chowning these directories to nobody as in:

chown -R nobody /var/www/web10/web/images/UserFiles

Since our apache runs as 'nobody' and php is NOT cgi, it works great UNTIL (apparently) something croned in ispconfig changes the directory ownerships back from nobody to web10_admin.web10, ...etc.

# 1. Is there some way to lock ownership of a directory so that ispconfig does not change it back?

If not, then I suppose running PHP as cgi and using suEXEC or suPHP is what is left. I am running a "Perfect Setup Fedora Core 3" server.

#2. Is there a tutorial for setting up PHP to run as a CGI using suEXEC?

I saw the new tutorial for suPHP on Debian, but am reluctant to have to always edit the httpd.conf every time we install a new site to add the suPHP etc.

What do you guys recommend?

Thanks for your wisdom.

RBartz
Reply With Quote
Sponsored Links
  #2  
Old 12th July 2006, 13:07
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,421
Thanks: 812
Thanked 5,205 Times in 4,081 Posts
Default

SuPHP will be supported directly in the next ISPConfig release. I expect the new release to be ready within 1-2 weeks.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 12th July 2006, 13:54
fobicodam fobicodam is offline
Senior Member
 
Join Date: Apr 2006
Location: Argentina
Posts: 346
Thanks: 0
Thanked 1 Time in 1 Post
Send a message via MSN to fobicodam
Default

ready to use or ready to test it? will it be release as a dev version?

did you let erase selected items from the recycle bin?
Reply With Quote
  #4  
Old 12th July 2006, 13:58
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,421
Thanks: 812
Thanked 5,205 Times in 4,081 Posts
Default

Quote:
Originally Posted by fobicodam
ready to use or ready to test it? will it be release as a dev version?
stable and dev branch.

Quote:
did you let erase selected items from the recycle bin?
No, thats currently not on our feature list.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 13th July 2006, 10:14
rbartz rbartz is offline
Member
 
Join Date: Apr 2006
Posts: 80
Thanks: 9
Thanked 6 Times in 5 Posts
Default

Thanks Till! Sorry I called you Tim in the first post...! You and Falko are amazing. I am not sure about Tim, whoever he is...!

Quote:
Originally Posted by till
SuPHP will be supported directly in the next ISPConfig release. I expect the new release to be ready within 1-2 weeks.
Great! This will solve the problem. I will watch for it. In the meantime, I suppose I could temporarily chmod 777 those dirs so that ownership wouldn't matter. That would help at least for now rather than having to go back and manually change the owner to nobody every so often, although the lack of security of that is not appealing.

I am still puzzled at what it is that changes the ownership of all directories and files in the web/ directory back to the site admin's user/group. Ownership seems to change back whenever another new site or user is added to the server...? Is that intended?

Thanks again
Reply With Quote
  #6  
Old 13th July 2006, 13:44
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,721 Times in 2,562 Posts
Default

Quote:
Originally Posted by rbartz
In the meantime, I suppose I could temporarily chmod 777 those dirs so that ownership wouldn't matter.
Yes, you can do that, but keep in mind that this is rather insecure (if you have users you trust, then it's ok).

I am still puzzled at what it is that changes the ownership of all directories and files in the web/ directory back to the site admin's user/group. Ownership seems to change back whenever another new site or user is added to the server...? Is that intended?
[/QUOTE]
The files and directories in /var/www/web1/web (for example) aren't touched regarding permissions and ownerships. Only the files and directories above that level (in /var/www/web1, for example).
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #7  
Old 14th July 2006, 05:34
rbartz rbartz is offline
Member
 
Join Date: Apr 2006
Posts: 80
Thanks: 9
Thanked 6 Times in 5 Posts
Default

Quote:
Originally Posted by falko
The files and directories in /var/www/web1/web (for example) aren't touched regarding permissions and ownerships. Only the files and directories above that level (in /var/www/web1, for example).
Hmmm.... One live example right now is a directory named content:
/var/www/web20/web/content

The ownership 48 hours ago was nobody.web8, I set it to update a shtml content page. When I checked a few minutes ago, it is NOW:

drwxr-xr-x 2 greenfields web8 4096 Jun 27 14:34 content

Something, somewhere, changed the ownership of it and its contents back to the site admin user account.

Any ideas?

Thanks!
Reply With Quote
  #8  
Old 14th July 2006, 11:29
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,721 Times in 2,562 Posts
Default

Maybe some other process (cron job, etc.) changed it, maybe even yourself?
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #9  
Old 14th July 2006, 14:58
fobicodam fobicodam is offline
Senior Member
 
Join Date: Apr 2006
Location: Argentina
Posts: 346
Thanks: 0
Thanked 1 Time in 1 Post
Send a message via MSN to fobicodam
Default

i believe you must review some ispconfig cron jobs, i have 2 problems with them, first, "someone" change the /var/spool/mail access rights, and second, "someone" make proftod stop every hour (every hour at 8 minutes) the service check system start it again but one hour later it stops again. I cant see the log files yet..
Reply With Quote
  #10  
Old 15th July 2006, 13:05
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,721 Times in 2,562 Posts
 
Default

That's the first time I hear something like this, so I doubt it is related to ISPConfig's cron jobs...
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Help dnectom Installation/Configuration 5 15th June 2006 14:05
Mysterious Install Problem tgansert Installation/Configuration 5 9th May 2006 15:35
setup fails on debian 3.1 dtrumbower Installation/Configuration 7 7th March 2006 13:42
Update to 2.2.0 question brianetilley Installation/Configuration 10 4th March 2006 17:02
ISP install problems Debian sarge 3.1 lerra Installation/Configuration 1 5th January 2006 16:37


All times are GMT +2. The time now is 02:08.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.