New websites are created with the owner root

Discussion in 'Installation/Configuration' started by BigJens, May 2, 2017.

  1. BigJens

    BigJens New Member

    Hi!

    I have a problem with my ISPconfig 3 installation. It worked fine until this weekend when I tried to create a new website. The owner the new site is root. I tried it several times but noch change in this behaviour.

    Security level "high" under System > Server Config > Web is selected.

    Then i turned on debugging and here is the log:

    Code:
    02.05.2017-15:24 - DEBUG - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'.
    02.05.2017-15:24 - DEBUG - Found 1 changes, starting update process.
    02.05.2017-15:24 - DEBUG - Calling function 'ssl' from plugin 'apache2_plugin' raised by event 'web_domain_insert'.
    02.05.2017-15:24 - DEBUG - Calling function 'insert' from plugin 'apache2_plugin' raised by event 'web_domain_insert'.
    02.05.2017-15:24 - DEBUG - Adding the user: web73
    02.05.2017-15:24 - DEBUG - chown failed: /var/www/clients/client2/web73/private : web73
    02.05.2017-15:24 - DEBUG - Creating symlink: ln -s /var/www/clients/client2/web73/ /var/www/knut-ist-gut.de
    02.05.2017-15:24 - DEBUG - Creating symlink: ln -s /var/www/clients/client2/web73/ /var/www/clients/client2/knut-ist-gut.de
    02.05.2017-15:24 - DEBUG - exec: chown -R web73:client2 /var/www/clients/client2/web73/web
    02.05.2017-15:24 - DEBUG - exec: chown web73:client2 /var/www/clients/client2/web73/web
    02.05.2017-15:24 - DEBUG - exec: usermod --groups sshusers web73 2>/dev/null
    02.05.2017-15:24 - DEBUG - chown failed: /var/www/clients/client2/web73/cgi-bin : web73
    02.05.2017-15:24 - DEBUG - chown failed: /var/www/clients/client2/web73/tmp : web73
    02.05.2017-15:24 - DEBUG - chown failed: /var/www/clients/client2/web73/web : web73
    02.05.2017-15:24 - DEBUG - chown failed: /var/www/clients/client2/web73/web/error : web73
    02.05.2017-15:24 - DEBUG - chown failed: /var/www/clients/client2/web73/web/stats : web73
    02.05.2017-15:24 - DEBUG - chown failed: /var/www/clients/client2/web73/webdav : web73
    02.05.2017-15:24 - DEBUG - chown failed: /var/www/clients/client2/web73/private : web73
    02.05.2017-15:24 - DEBUG - Writing the vhost file: /etc/apache2/sites-available/kaut-ist-gut.de.vhost
    02.05.2017-15:24 - DEBUG - Creating symlink: /etc/apache2/sites-enabled/100-kaut-ist-gut.de.vhost->/etc/apache2/sites-available/kaut-ist-gut.de.vhost
    02.05.2017-15:24 - DEBUG - Apache status is: running
    02.05.2017-15:24 - DEBUG - Calling function 'restartHttpd' from module 'web_module'.
    02.05.2017-15:24 - DEBUG - Restarting httpd: /etc/init.d/apache2 restart
    02.05.2017-15:24 - DEBUG - Apache restart return value is: 0
    02.05.2017-15:24 - DEBUG - Apache online status after restart is: running
    02.05.2017-15:24 - DEBUG - Processed datalog_id 1003
    02.05.2017-15:24 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
    Any ideas for a solution of this problem?

    TIA and regards
    J.
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Does the user web73 exists in /etc/passwd ?
     
  3. BigJens

    BigJens New Member

    Yes, the user is existing.
     
  4. BigJens

    BigJens New Member

    Does Anybody have a hint why this problem occurs or what to check next? I appreciate all help here.
     
  5. till

    till Super Moderator Staff Member ISPConfig Developer

    The folders where a failed chown is reported do all exist?
    Did you disable any functions in the php.ini that is used by the commandline (cli) php like chown, exec or passthru?
     
  6. BigJens

    BigJens New Member

    Here is a list of the disabled PHP functions, I think this looks okay.
    Code:
    server:~#
    server:~# grep disable_functions /etc/php5/apache2/php.ini
    disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
    server:~#
    server:~#
    server:~# grep disable_functions /etc/php5/cli/php.ini
    disable_functions =
    server:~#
    server:~#
    server:~# grep disable_functions /etc/php5/fpm/php.ini
    disable_functions = pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
    server:~#
    And here are the directories. Looks like it should besides the owner:

    Code:
    server:~# l /var/www/clients/client2/web75/
    total 28K
    drwxr-xr-x 2 root client2 4.0K May  2 17:29 cgi-bin
    drwxr-xr-x 2 root root    4.0K May  2 17:29 log
    drwx--x--- 2 root client2 4.0K May  2 17:29 private
    drwxr-xr-x 2 root root    4.0K May  2 17:29 ssl
    drwxrwx--- 2 root client2 4.0K May  2 17:29 tmp
    drwx--x--x 4 root client2 4.0K May  2 17:29 web
    drwx--x--- 2 root client2 4.0K May  2 17:29 webdav
     
  7. till

    till Super Moderator Staff Member ISPConfig Developer

    Looks fine so far. and the security level was set to hugh at the time you created the site, right?

    Try to enable System > Server config > Web > permissions > Set folder permissions on update

    Then change a value in the website like quota or disable or enable a feature and press safe. Then wait a minute and check if the permissions got corrected.
     
  8. BigJens

    BigJens New Member

    System > Server config > Web > permissions > Set folder permissions on update is enabled

    Then I enabled disabled PHP and enabled PHP for this page. Unfortunately there was no success.

    Code:
    03.05.2017-11:35 - DEBUG - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'.
    03.05.2017-11:35 - DEBUG - Found 1 changes, starting update process.
    03.05.2017-11:35 - DEBUG - Calling function 'ssl' from plugin 'apache2_plugin' raised by event 'web_domain_update'.
    03.05.2017-11:35 - DEBUG - Calling function 'update' from plugin 'apache2_plugin' raised by event 'web_domain_update'.
    03.05.2017-11:35 - DEBUG - exec: usermod --groups sshusers web75 2>/dev/null
    03.05.2017-11:35 - DEBUG - chown failed: /var/www/clients/client2/web75/cgi-bin : web75
    03.05.2017-11:35 - DEBUG - chown failed: /var/www/clients/client2/web75/tmp : web75
    03.05.2017-11:35 - DEBUG - chown failed: /var/www/clients/client2/web75/web : web75
    03.05.2017-11:35 - DEBUG - chown failed: /var/www/clients/client2/web75/web/error : web75
    03.05.2017-11:35 - DEBUG - chown failed: /var/www/clients/client2/web75/web/stats : web75
    03.05.2017-11:35 - DEBUG - chown failed: /var/www/clients/client2/web75/webdav : web75
    03.05.2017-11:35 - DEBUG - chown failed: /var/www/clients/client2/web75/private : web75
    03.05.2017-11:35 - DEBUG - Creating fastcgi starter script directory: /var/www/php-fcgi-scripts/web75/
    03.05.2017-11:35 - DEBUG - chown failed: /var/www/php-fcgi-scripts/web75/ : web75
    03.05.2017-11:35 - DEBUG - Creating fastcgi starter script: /var/www/php-fcgi-scripts/web75/.php-fcgi-starter
    03.05.2017-11:35 - DEBUG - chown failed: /var/www/php-fcgi-scripts/web75/.php-fcgi-starter : web75
    03.05.2017-11:35 - DEBUG - Writing the vhost file: /etc/apache2/sites-available/knut-ist-gut.de.vhost
    03.05.2017-11:35 - DEBUG - Apache status is: running
    03.05.2017-11:35 - DEBUG - Calling function 'restartHttpd' from module 'web_module'.
    03.05.2017-11:35 - DEBUG - Restarting httpd: /etc/init.d/apache2 restart
    03.05.2017-11:35 - DEBUG - Apache restart return value is: 0
    03.05.2017-11:35 - DEBUG - Apache online status after restart is: running
    03.05.2017-11:35 - DEBUG - Processed datalog_id 1019
    03.05.2017-11:35 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
    
    
    AND
    
    server:~# l /var/www/clients/client2/web75/        
    total 28K
    drwxr-xr-x 2 root client2 4.0K May  2 17:29 cgi-bin
    drwxr-xr-x 2 root root    4.0K May  2 17:29 log
    drwx--x--- 2 root client2 4.0K May  2 17:29 private
    drwxr-xr-x 2 root root    4.0K May  2 17:29 ssl
    drwxrwx--- 2 root client2 4.0K May  2 17:29 tmp
    drwx--x--x 4 root client2 4.0K May  2 17:29 web
    drwx--x--- 2 root client2 4.0K May  2 17:29 webdav
     
  9. florian030

    florian030 Well-Known Member HowtoForge Supporter

    you can check the integrity of passwd and shadow with pwchk
     
  10. BigJens

    BigJens New Member

    Looks okay too

    Code:
    server:~# pwck
    user 'lp': directory '/var/spool/lpd' does not exist
    user 'news': directory '/var/spool/news' does not exist
    user 'uucp': directory '/var/spool/uucp' does not exist
    user 'list': directory '/var/list' does not exist
    user 'irc': directory '/var/run/ircd' does not exist
    user 'gnats': directory '/var/lib/gnats' does not exist
    user 'nobody': directory '/nonexistent' does not exist
    user 'uuidd': directory '/run/uuidd' does not exist
    user 'systemd-timesync': directory '/run/systemd' does not exist
    user 'systemd-network': directory '/run/systemd/netif' does not exist
    user 'systemd-resolve': directory '/run/systemd/resolve' does not exist
    user 'systemd-bus-proxy': directory '/run/systemd' does not exist
    user 'messagebus': directory '/var/run/dbus' does not exist
    user 'ntp': directory '/home/ntp' does not exist
    user 'dovenull': directory '/nonexistent' does not exist
    user 'memcache': directory '/nonexistent' does not exist
    user 'web11': directory '/var/www/clients/client2/web11/./home/st_webmail.stuff' does not exist
    pwck: no changes
    server:~# 
     
  11. florian030

    florian030 Well-Known Member HowtoForge Supporter

    did you get an error when you run chmod yourself?
    chown web75 /var/www/clients/client2/web75/webdav ?
     
  12. BigJens

    BigJens New Member

    Hmmhh the disk quota exceeded error looks suspicious
    Code:
    server:~# l /var/www/clients/client2/web75      
    total 28K
    drwxr-xr-x 2 root client2 4.0K May  2 17:29 cgi-bin
    drwxr-xr-x 2 root root    4.0K May  2 17:29 log
    drwx--x--- 2 root client2 4.0K May  2 17:29 private
    drwxr-xr-x 2 root root    4.0K May  2 17:29 ssl
    drwxrwx--- 2 root client2 4.0K May  2 17:29 tmp
    drwx--x--x 4 root client2 4.0K May  2 17:29 web
    drwx--x--- 2 root client2 4.0K May  2 17:29 webdav
    server:~#
    server:~#
    server:~# chown web75 /var/www/clients/client2/web75/webdav
    chown: changing ownership of '/var/www/clients/client2/web75/webdav': Disk quota exceeded
    server:~#
    server:~#
    server:~# df -h
    Filesystem      Size  Used Avail Use% Mounted on
    /dev/simfs       50G   13G   38G  26% /
    tmpfs           308M  120K  308M   1% /run
    tmpfs           5.0M     0  5.0M   0% /run/lock
    tmpfs           615M     0  615M   0% /run/shm
    server:~# df -i
    Filesystem       Inodes  IUsed   IFree IUse% Mounted on
    /dev/simfs     10000000 550595 9449405    6% /
    tmpfs            393216    101  393115    1% /run
    tmpfs            393216     12  393204    1% /run/lock
    tmpfs            393216      2  393214    1% /run/shm
    server:~# 
     
  13. BigJens

    BigJens New Member

    Yes! Got it and it's running smooth again. Disk quota was the key hint. There was a limit in the vServer Host that nobody paid attention to.
    Thanks a lot for the help! :)
     

Share This Page