Check for security permission: admin_allow_server_config failed.

Discussion in 'Installation/Configuration' started by sussox, Jun 16, 2015.

  1. sussox

    sussox New Member

    I've been getting this problem, i think its after upgrading to 3.0.5.4 p8. Or after joing a new server to the multi-server setup, not sure which.

    The error is just like in this thread below. But the fix does not work.
    https://www.howtoforge.com/communit...-5-4p3-cant-access-server-config-error.66660/

    I am logged in as admin (user-id 0) I also have set the security_settings.ini. like below
    But i still cant edit the server config.. Any clues?

    Code:
    [permissions]
    allow_shell_user=yes
    admin_allow_server_config=yes
    admin_allow_server_services=yes
    admin_allow_server_ip=yes
    admin_allow_remote_users=yes
    admin_allow_system_config=yes
    admin_allow_server_php=yes
    admin_allow_langedit=yes
    admin_allow_new_admin=yes
    admin_allow_del_cpuser=yes
    admin_allow_cpuser_group=yes
    admin_allow_firewall_config=yes
    admin_allow_osupdate=yes
    admin_allow_software_packages=yes
    admin_allow_software_repo=yes
    remote_api_allowed=yes
    password_reset_allowed=yes
    
    [ids]
    ids_enabled=no
    ids_log_level=1
    ids_warn_level=5
    ids_block_level=100
    sql_scan_enabled=yes
    sql_scan_action=warn
    apache_directives_scan_enabled=yes
    [systemcheck]
    security_admin_email=root@localhost
    security_admin_email_subject=Security alert from server
    warn_new_admin=yes
    warn_passwd_change=no
    warn_shadow_change=no
    warn_group_change=no
    
     
  2. sussox

    sussox New Member

    I notice i also get this error in apache errorlog:
    Code:
     mod_fcgid: stderr: PHP Warning:  file_get_contents(): Filename cannot be empty in /usr/local/ispconfig/interface/lib/classes/getconf.inc.php on line 69
    Line 69 in that file refers to the security_config_path, seems that ispconfig cant find the config.. But why?
     
  3. sussox

    sussox New Member

    Problem is solved. It was a file permission-issue.
     
  4. czdavid

    czdavid Member

    Hello, I have the same problem. What file has wrong permissions?
    Thank you!
     
  5. digiplay

    digiplay New Member

    I am having this problem also: Check for security permission: admin_allow_system_config failed.
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Most likely you use a second admin user (sub admin), sub-admins are not allowed to edit these settings. If you want to give them access to the server config settings then set the permissions in /usr/local/ispconfig/security/security_settings.ini
     
  7. digiplay

    digiplay New Member

    Thanks, I will check it out.
     

Share This Page