Admin error: Check for security permission...

Discussion in 'Installation/Configuration' started by czdavid, Jun 27, 2015.

  1. czdavid

    czdavid Member

    Hello,
    I recently updated from ISPConfig 3.0.5.3 to 3.0.5.4p8.
    I have problem as administrator with my admin user access sections of control panel with error message Check for security permission: ...
    File /usr/local/ispconfig/security/security_settings.ini is:
    Code:
    [permissions]
    allow_shell_user=yes
    admin_allow_server_config=yes
    admin_allow_server_services=yes
    admin_allow_server_ip=yes
    admin_allow_remote_users=yes
    admin_allow_system_config=yes
    admin_allow_server_php=yes
    admin_allow_langedit=yes
    admin_allow_new_admin=yes
    admin_allow_del_cpuser=yes
    admin_allow_cpuser_group=yes
    admin_allow_firewall_config=yes
    admin_allow_osupdate=yes
    admin_allow_software_packages=yes
    admin_allow_software_repo=yes
    remote_api_allowed=yes
    password_reset_allowed=yes
    
    What is wrong?

    Thank you.

    David
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Maybe your ispconfig is running on a wrong user. ensure that suexec is enabled in apache and that mof_fcgid is installed and enabled in apache.
     
  3. czdavid

    czdavid Member

    Hello,
    thank you for your answer. I checked apache error log and there is PHP warning.
    Code:
    [Sun Jun 28 20:10:52 2015] [warn] [client 88.146.xx.xx] mod_fcgid: stderr: PHP Warning: file_get_contents(): Filename cannot be empty in /usr/local/ispconfig/interface/lib/classes/getconf.inc.php on line 69, referer: https://myserver.tld:8080/
    PHP Warning: PHP Startup: Unable to load dynamic library '/usr/lib/php5/20090626+lfs/suhosin.so' - /usr/lib/php5/20090626+lfs/suhosin.so: cannot open shared object file: No such file or directory in Unknown on line 0
    [Sun Jun 28 20:13:48 2015] [warn] [client 88.146.xx.xx] mod_fcgid: stderr: PHP Warning:  file_get_contents(): Filename cannot be empty in /usr/local/ispconfig/interface/lib/classes/getconf.inc.php on line 69, referer: https://myserver.tld:8080/index.php
    [Sun Jun 28 20:13:50 2015] [warn] [client 88.146.xx.xx] mod_fcgid: stderr: PHP Warning:  realpath(): SAFE MODE Restriction in effect.  The script whose uid is 5003 is not allowed to access /usr/local/ispconfig/security/security_settings.ini owned by uid 0 in /usr/local/ispconfig/interface/lib/classes/getconf.inc.php on line 68, referer: https://myserver.tld:8080/index.php
    
    What can I do to fix it?
     
  4. florian030

    florian030 Well-Known Member HowtoForge Supporter

    Fix the permissions for security_settings.ini.
    chgrp ispconfig /usr/local/ispconfig/security/security_settings.ini
    chmod 750 /usr/local/ispconfig/security/security_settings.ini
     
  5. czdavid

    czdavid Member

    I ran commands. I am still getting the same errors (and cant access server configuration at panel).

    Code:
    [Mon Jun 29 11:14:21 2015] [warn] [client 46.13.xx.xx] mod_fcgid: stderr: PHP Warning:  file_get_contents(): Filename cannot be empty in /usr/local/ispconfig/interface/lib/classes/getconf.inc.php on line 69, referer: https://myserver.tld:8080/index.php
    [Mon Jun 29 11:14:21 2015] [warn] [client 46.13.xx.xx] mod_fcgid: stderr: PHP Warning:  realpath(): SAFE MODE Restriction in effect.  The script whose uid is 5003 is not allowed to access /usr/local/ispconfig/security/security_settings.ini owned by uid 0 in /usr/local/ispconfig/interface/lib/classes/getconf.inc.php on line 68, referer: https://myserver.tld:8080/index.php
    [Mon Jun 29 11:14:21 2015] [warn] [client 46.13.xx.xx] mod_fcgid: stderr: PHP Warning:  file_get_contents(): Filename cannot be empty in /usr/local/ispconfig/interface/lib/classes/getconf.inc.php on line 69, referer: https://myserver.tld:8080/index.php
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Wat about suexec and fcgi (see my post above)?
     
  7. czdavid

    czdavid Member

    Mod_fcgi is enabled. But suhosin.so is missing at this directory /usr/lib/php5/20090626+lfs/suhosin.so (It is in apache error.log)
    ... it is probably some kind of Debian bug. Is possible to solve it?
     

Share This Page