Error: Check for security permission: admin_allow_server_services failed.

Discussion in 'Installation/Configuration' started by c.monty, Feb 3, 2016.

  1. c.monty

    c.monty New Member

    Hello!

    I cannot modify e.g. Sytem - Server Services and get this error (see attachment):
    Check for security permission: admin_allow_server_services failed.

    In the Nginx errorlog the following information is logged:
    Code:
    PHP message: PHP Warning:  is_file(): open_basedir restriction in effect. File(/usr/local/ispconfig/security/security_settings.ini) is not within the allowed path(s): (/usr/share/adminer/:/var/www/:/usr/local/ispconfig/interface/) in /usr/local/ispconfig/interface/lib/classes/getconf.inc.php on line 68
    PHP message: PHP Warning:  realpath(): open_basedir restriction in effect. File(/usr/local/ispconfig/security/security_settings.ini) is not within the allowed path(s): (/usr/share/adminer/:/var/www/:/usr/local/ispconfig/interface/) in /usr/local/ispconfig/interface/lib/classes/getconf.inc.php on line 68
    PHP message: PHP Warning:  file_get_contents(): Filename cannot be empty in /usr/local/ispconfig/interface/lib/classes/getconf.inc.php on line 69
    PHP message: PHP Warning:  is_file(): open_basedir restriction in effect. File(/usr/local/ispconfig/security/security_settings.ini) is not within the allowed path(s): (/usr/share/adminer/:/var/www/:/usr/local/ispconfig/interface/) in /usr/local/ispconfig/interface/lib/classes/getconf.inc.php on line 68
    PHP message: PHP Warning:  realpath(): open_basedir restriction in effect. File(/usr/local/ispconfig/security/security_settings.ini) is not within the allowed path(s): (/usr/share/adminer/:/var/www/:/usr/local/ispconfig/interface/) in /usr/local/ispconfig/interface/lib/classes/getconf.inc.php on line 68
    PHP message: PHP Warning:  file_get_contents(): Filename cannot be empty in /usr/local/ispconfig/interface/lib/classes/getconf.inc.php on line 69
    PHP message: PHP Warning:  is_file(): open_basedir restriction in effect
    
    How can I troubleshoot this error?

    THX
     

    Attached Files:

    Last edited: Feb 3, 2016
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    You try to edit functions as sub admin that are reserved for the master admin user (the one with username admin). Either login as master admin or disable the security checks in /usr/local/ispconfig/server/security/security_settings.ini
     
  3. c.monty

    c.monty New Member

    Hi,

    in order to fix the issue I have executed the following tasks:
    1. Logon as admin
    2. Change default password of admin
    3. Create another user account and assign this to group admin
    4. Change all security checks in /usr/local/ispconfig/server/security/security_settings.ini to "yes"

    However, this does not help.

    When you check the screenshot you will see that I'm getting this error when logged in as admin.

    THX
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Have you set a global open_baesir restriction in a php.ini file? If yes, then remove that. the open_basedir is handled by ispconfig and should not be set globally.
     
  5. c.monty

    c.monty New Member

    In fact this setting was defined in /etc/php5/fpm/php.ini. After commenting out this line the issue is solved.
    ;open_basedir = /usr/share/adminer/:/var/www/:/usr/local/ispconfig/interface/
     

Share This Page