Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > General

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 2nd December 2013, 14:48
da_sys da_sys is offline
Junior Member
 
Join Date: Nov 2013
Posts: 6
Thanks: 1
Thanked 0 Times in 0 Posts
Unhappy After upgrading ISPConfig 3.5.0.3 : website create with wrong owner and group

Hello,

Sorry for my poor english.

I update ISPConfig from 3.0.5.1 to 3.0.5.3. All working fine except one thing :

When i create a new website the folder webXX (example: web44) is create with wrong owner (root) et group (root) instead of owner (webXX - example: web44) and group (clientXX - example: web121).

So i can't upload file on web44 now

I tried to connect in ssh with root login to modify owner et group with chown command : "Operation not permitted"

What is wrong ?

Where can i modify default owner and group configuration in ISPConfig ?

Sorry for my questions, i'm totally newbie on ISPConfig

Thank you

Best regards
Reply With Quote
Sponsored Links
  #2  
Old 2nd December 2013, 14:53
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,486
Thanks: 813
Thanked 5,256 Times in 4,121 Posts
Default

Thats all correct and as it should be. You have to upload files to the "web" folder of the website, not to the website root dir. The web folder is owned by the web user and client group of the website. If you want to store files that shall not be accessible by http, then they can be uploaded to the private directory.

As a sidenote, the folder permission scheme has been changed with 3.0.5.0, so it was like this already on 3.0.5.1.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 2nd December 2013, 15:17
da_sys da_sys is offline
Junior Member
 
Join Date: Nov 2013
Posts: 6
Thanks: 1
Thanked 0 Times in 0 Posts
Red face Ok but our CMS must install files and folders in parent on web folder

Hello Till,

Thank you so much for your answer.

In understand, but our CMS must install some files and folders in parent of web folder like configurations and core files/folder to work.

How can i update this files and folders to "root" website (note "/web" but "/") ?

PS : i'm trying to create a "Protected Folders" with path "/" and "Protected Folder Users" but i can't login (530 login incorrect)

Thank you.

Best regards
Reply With Quote
  #4  
Old 2nd December 2013, 15:33
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,486
Thanks: 813
Thanked 5,256 Times in 4,121 Posts
Default

You can remove the folder protection with e.g.:

chattr -i /var/www/clients/client1/web1

so you can upload files there with root. But I recommend to activate it again when you are finished with the installation by running:

chattr +i /var/www/clients/client1/web1

You can also deactivate the protection mechanism permanently under System > Server config > web.

We had to change the folder permissions for security reasons, so it was not our intention to annoy admins, it was simply nescessary.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 2nd December 2013, 16:50
da_sys da_sys is offline
Junior Member
 
Join Date: Nov 2013
Posts: 6
Thanks: 1
Thanked 0 Times in 0 Posts
Red face Another website stop to working now

Thank you Till,

Unfortunately, another website with the same CMS stopped to work after update. Here is error message :

Quote:
Warning: require(): open_basedir restriction in effect. File(/var/www/clients/client12/web37/core/init.php) is not within the allowed path(s): (/var/www/clients/client12/web37/web:/var/www/clients/client12/web37/tmp:/var/www/mywebsite.com/web:/srv/www/mywebsite.com/web:/usr/share/php5:/tmp:/usr/share/phpmyadmin:/etc/phpmyadmin:/var/lib/phpmyadmin) in /var/www/clients/client12/web37/web/index.php on line 46 Warning: require(/var/www/clients/client12/web37/core/init.php): failed to open stream: Operation not permitted in /var/www/clients/client12/web37/web/index.php on line 46 Fatal error: require(): Failed opening required '/var/www/clients/client12/web37/web/../core/init.php' (include_path='.:/usr/share/php:/usr/share/pear') in /var/www/clients/client12/web37/web/index.php on line 46
So we're going to desactive the protection mechanism permenently.

You said :
You can also deactivate the protection mechanism permanently under System > Server config > web.

Please, could you tell me the tabs and the parameter(s) to change ?

Thank you for all.

Best regards

Last edited by da_sys; 2nd December 2013 at 17:50.
Reply With Quote
  #6  
Old 2nd December 2013, 17:49
da_sys da_sys is offline
Junior Member
 
Join Date: Nov 2013
Posts: 6
Thanks: 1
Thanked 0 Times in 0 Posts
 
Smile Here is the "fix"

Here is a "fix" to access parent folders of "web" directory (and keep "hig"h level of security in system configuration) :

Just add path dir to allow in "open_basedir PHP" for each website. Sorry my ISP config is in french :

"Sites" tab > Websites > "Options" tab > input "open_basedir"

For example to add "core" folder, juste add :
:/var/www/clients/client1/web1/core

client and web must the same number of other directives.

Best regards
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Changing group directories dgmufasa Installation/Configuration 4 27th December 2011 11:45
ISPConfig 3.0.3.2 vmail owner group raiman General 6 8th April 2011 14:38


All times are GMT +2. The time now is 21:49.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.