Hi, I am running Apache. Im wondering if my folder permissions should be for example web3:client0 or www-data:www-data? My permission has always been web3:client0 but recently after updating php to the last version its now www-data:www-data and this is causing problems. If I change it to web3:client0 I get permission problems. I saw that I need to put Fast-CGI and suEXEC enabled. But I did and its not helping. Which one is the correct, and any tips on how to fix this?
It should be the webID:clientID, and SuExec should be enabled. Make sure you set the permissions recursively.
The suggestion from Thom is correct, if you set it already like this, then your php update must have messed up the php installation or must have disabled or removed suexec. What exactly did you do?
I am using PHP7.3 from Ondrej in ubuntu 18.04. I did the normal thing I always do "apt-get upgrade" and installed the last php updates. Nothing was removed, just upgraded. When I upload for example the Nextcloud installer trough FTP, the files is written with the correct permissions web3:client0. But whenever I start that installation, the permissions is changed to www-data:www-data. Thanks for the help so far!
Run the test script from https://www.howtoforge.com/community/threads/please-read-before-posting.58408/ and post results here (in CODE tags!).
Please read the read before posting: https://www.howtoforge.com/community/threads/please-read-before-posting.58408/
Not sure if you get too much useful, but here it is. Code: ##### SERVER ##### IP-address (as per hostname): ***.***.***.*** [WARN] could not determine server's ip address by ifconfig [INFO] OS version is Ubuntu 18.04.5 LTS [INFO] uptime: 14:10:17 up 18:42, 1 user, load average: 0.09, 0.03, 0.01 [INFO] memory: total used free shared buff/cache available Mem: 7.8G 2.7G 405M 132M 4.6G 4.6G Swap: 4.0G 524K 4.0G [INFO] ISPConfig is installed. ##### ISPCONFIG ##### ISPConfig version is 3.2.2 ##### VERSION CHECK ##### [INFO] php (cli) version is 7.2.34-13+ubuntu18.04.1+deb.sury.org+1 ##### PORT CHECK ##### [WARN] Port 22 (SSH server) seems NOT to be listening ##### MAIL SERVER CHECK ##### ##### RUNNING SERVER PROCESSES ##### [INFO] I found the following web server(s): Apache 2 (PID 26597) [INFO] I found the following mail server(s): Unknown process (smtpd) (PID 26790) [INFO] I found the following pop3 server(s): Dovecot (PID 34122) [INFO] I found the following imap server(s): Dovecot (PID 34122) [INFO] I found the following ftp server(s): PureFTP (PID 25221) ##### LISTENING PORTS ##### (only () Local (Address) [localhost]:10024 (34036/amavisd-new) [localhost]:10025 (33985/master) [localhost]:10026 (34036/amavisd-new) [localhost]:10027 (33985/master) [anywhere]:587 (33985/master) [localhost]:6379 (1508/redis-server) [localhost]:11211 (923/memcached) [anywhere]:110 (34122/dovecot) [anywhere]:143 (34122/dovecot) [anywhere]:465 (33985/master) [anywhere]:21 (25221/pure-ftpd) ***.***.***.***:53 (985/named) [localhost]:53 (985/named) ***.***.***.***:53 (826/systemd-resolve) [anywhere]:25 (26790/smtpd) [localhost]:953 (985/named) [localhost]:6010 (26522/sshd:) [anywhere]:993 (34122/dovecot) [anywhere]:7777 (1275/sshd) ***.***.***.***:40130 (25221/pure-ftpd) [anywhere]:995 (34122/dovecot) [localhost]:11332 (34039/rspamd:) [localhost]:11333 (34039/rspamd:) [localhost]:11334 (34039/rspamd:) [localhost]:10023 (1896/postgrey) *:*:*:*::*:10024 (34036/amavisd-new) *:*:*:*::*:10026 (34036/amavisd-new) *:*:*:*::*:3306 (33612/mysqld) *:*:*:*::*:587 (33985/master) *:*:*:*::*:6379 (1508/redis-server) [localhost]10 (34122/dovecot) [localhost]43 (34122/dovecot) *:*:*:*::*:8080 (26597/apache2) *:*:*:*::*:80 (26597/apache2) *:*:*:*::*:8081 (26597/apache2) *:*:*:*::*:465 (33985/master) *:*:*:*::*:21 (25221/pure-ftpd) *:*:*:*::*:53 (985/named) *:*:*:*::*:25 (26790/smtpd) *:*:*:*::*:953 (985/named) *:*:*:*::*:6010 (26522/sshd:) *:*:*:*::*:443 (26597/apache2) *:*:*:*::*:993 (34122/dovecot) *:*:*:*::*:7777 (1275/sshd) *:*:*:*::*:995 (34122/dovecot) *:*:*:*::*:11332 (34039/rspamd:) *:*:*:*::*:11333 (34039/rspamd:) *:*:*:*::*:11334 (34039/rspamd:) *:*:*:*::*:10023 (1896/postgrey) ##### IPTABLES ##### Chain INPUT (policy DROP) target prot opt source destination f2b-sasl tcp -- [anywhere]/0 [anywhere]/0 multiport dports 25,465,587,143,993,110,995 f2b-postfix tcp -- [anywhere]/0 [anywhere]/0 multiport dports 25,465 f2b-dovecot-pop3imap tcp -- [anywhere]/0 [anywhere]/0 multiport dports 110,995,143,993 f2b-sshd tcp -- [anywhere]/0 [anywhere]/0 multiport dports 7777 ufw-before-logging-input all -- [anywhere]/0 [anywhere]/0 ufw-before-input all -- [anywhere]/0 [anywhere]/0 ufw-after-input all -- [anywhere]/0 [anywhere]/0 ufw-after-logging-input all -- [anywhere]/0 [anywhere]/0 ufw-reject-input all -- [anywhere]/0 [anywhere]/0 ufw-track-input all -- [anywhere]/0 [anywhere]/0 Chain FORWARD (policy DROP) target prot opt source destination ufw-before-logging-forward all -- [anywhere]/0 [anywhere]/0 ufw-before-forward all -- [anywhere]/0 [anywhere]/0 ufw-after-forward all -- [anywhere]/0 [anywhere]/0 ufw-after-logging-forward all -- [anywhere]/0 [anywhere]/0 ufw-reject-forward all -- [anywhere]/0 [anywhere]/0 ufw-track-forward all -- [anywhere]/0 [anywhere]/0 Chain OUTPUT (policy ACCEPT) target prot opt source destination ufw-before-logging-output all -- [anywhere]/0 [anywhere]/0 ufw-before-output all -- [anywhere]/0 [anywhere]/0 ufw-after-output all -- [anywhere]/0 [anywhere]/0 ufw-after-logging-output all -- [anywhere]/0 [anywhere]/0 ufw-reject-output all -- [anywhere]/0 [anywhere]/0 ufw-track-output all -- [anywhere]/0 [anywhere]/0 Chain f2b-dovecot-pop3imap (1 references) target prot opt source destination REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable RETURN all -- [anywhere]/0 [anywhere]/0 Chain f2b-postfix (1 references) target prot opt source destination REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable RETURN all -- [anywhere]/0 [anywhere]/0 Chain f2b-sasl (1 references) target prot opt source destination REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable RETURN all -- [anywhere]/0 [anywhere]/0 Chain f2b-sshd (1 references) target prot opt source destination REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable REJECT all -- ***.***.***.*** [anywhere]/0 reject-with icmp-port-unreachable RETURN all -- [anywhere]/0 [anywhere]/0 Chain ufw-after-forward (1 references) target prot opt source destination Chain ufw-after-input (1 references) target prot opt source destination ufw-skip-to-policy-input udp -- [anywhere]/0 [anywhere]/0 udp dpt:137 ufw-skip-to-policy-input udp -- [anywhere]/0 [anywhere]/0 udp dpt:138 ufw-skip-to-policy-input tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:139 ufw-skip-to-policy-input tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:445 ufw-skip-to-policy-input udp -- [anywhere]/0 [anywhere]/0 udp dpt:67 ufw-skip-to-policy-input udp -- [anywhere]/0 [anywhere]/0 udp dpt:68 ufw-skip-to-policy-input all -- [anywhere]/0 [anywhere]/0 ADDRTYPE match dst-type BROADCAST Chain ufw-after-logging-forward (1 references) target prot opt source destination LOG all -- [anywhere]/0 [anywhere]/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] " Chain ufw-after-logging-input (1 references) target prot opt source destination LOG all -- [anywhere]/0 [anywhere]/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] " Chain ufw-after-logging-output (1 references) target prot opt source destination Chain ufw-after-output (1 references) target prot opt source destination Chain ufw-before-forward (1 references) target prot opt source destination ACCEPT all -- [anywhere]/0 [anywhere]/0 ctstate RELATED,ESTABLISHED ACCEPT icmp -- [anywhere]/0 [anywhere]/0 icmptype 3 ACCEPT icmp -- [anywhere]/0 [anywhere]/0 icmptype 11 ACCEPT icmp -- [anywhere]/0 [anywhere]/0 icmptype 12 ACCEPT icmp -- [anywhere]/0 [anywhere]/0 icmptype 8 ufw-user-forward all -- [anywhere]/0 [anywhere]/0 Chain ufw-before-input (1 references) target prot opt source destination ACCEPT all -- [anywhere]/0 [anywhere]/0 ACCEPT all -- [anywhere]/0 [anywhere]/0 ctstate RELATED,ESTABLISHED ufw-logging-deny all -- [anywhere]/0 [anywhere]/0 ctstate INVALID DROP all -- [anywhere]/0 [anywhere]/0 ctstate INVALID ACCEPT icmp -- [anywhere]/0 [anywhere]/0 icmptype 3 ACCEPT icmp -- [anywhere]/0 [anywhere]/0 icmptype 11 ACCEPT icmp -- [anywhere]/0 [anywhere]/0 icmptype 12 ACCEPT icmp -- [anywhere]/0 [anywhere]/0 icmptype 8 ACCEPT udp -- [anywhere]/0 [anywhere]/0 udp spt:67 dpt:68 ufw-not-local all -- [anywhere]/0 [anywhere]/0 ACCEPT udp -- [anywhere]/0 ***.***.***.*** udp dpt:5353 ACCEPT udp -- [anywhere]/0 ***.***.***.*** udp dpt:1900 ufw-user-input all -- [anywhere]/0 [anywhere]/0 Chain ufw-before-logging-forward (1 references) target prot opt source destination Chain ufw-before-logging-input (1 references) target prot opt source destination Chain ufw-before-logging-output (1 references) target prot opt source destination Chain ufw-before-output (1 references) target prot opt source destination ACCEPT all -- [anywhere]/0 [anywhere]/0 ACCEPT all -- [anywhere]/0 [anywhere]/0 ctstate RELATED,ESTABLISHED ufw-user-output all -- [anywhere]/0 [anywhere]/0 Chain ufw-logging-allow (0 references) target prot opt source destination LOG all -- [anywhere]/0 [anywhere]/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW ALLOW] " Chain ufw-logging-deny (2 references) target prot opt source destination RETURN all -- [anywhere]/0 [anywhere]/0 ctstate INVALID limit: avg 3/min burst 10 LOG all -- [anywhere]/0 [anywhere]/0 limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] " Chain ufw-not-local (1 references) target prot opt source destination RETURN all -- [anywhere]/0 [anywhere]/0 ADDRTYPE match dst-type LOCAL RETURN all -- [anywhere]/0 [anywhere]/0 ADDRTYPE match dst-type MULTICAST RETURN all -- [anywhere]/0 [anywhere]/0 ADDRTYPE match dst-type BROADCAST ufw-logging-deny all -- [anywhere]/0 [anywhere]/0 limit: avg 3/min burst 10 DROP all -- [anywhere]/0 [anywhere]/0 Chain ufw-reject-forward (1 references) target prot opt source destination Chain ufw-reject-input (1 references) target prot opt source destination Chain ufw-reject-output (1 references) target prot opt source destination Chain ufw-skip-to-policy-forward (0 references) target prot opt source destination DROP all -- [anywhere]/0 [anywhere]/0 Chain ufw-skip-to-policy-input (7 references) target prot opt source destination DROP all -- [anywhere]/0 [anywhere]/0 Chain ufw-skip-to-policy-output (0 references) target prot opt source destination ACCEPT all -- [anywhere]/0 [anywhere]/0 Chain ufw-track-forward (1 references) target prot opt source destination Chain ufw-track-input (1 references) target prot opt source destination Chain ufw-track-output (1 references) target prot opt source destination ACCEPT tcp -- [anywhere]/0 [anywhere]/0 ctstate NEW ACCEPT udp -- [anywhere]/0 [anywhere]/0 ctstate NEW Chain ufw-user-forward (1 references) target prot opt source destination Chain ufw-user-input (1 references) target prot opt source destination ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:20 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:80 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:110 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:143 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:443 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:993 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:995 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:3306 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:8080 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:8081 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:10000 ACCEPT udp -- [anywhere]/0 [anywhere]/0 udp dpt:3306 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:21 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:7777 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:25 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:587 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 tcp dpt:990 ACCEPT tcp -- [anywhere]/0 [anywhere]/0 multiport dports 40110:40210 Chain ufw-user-limit (0 references) target prot opt source destination LOG all -- [anywhere]/0 [anywhere]/0 limit: avg 3/min burst 5 LOG flags 0 level 4 prefix "[UFW LIMIT BLOCK] " REJECT all -- [anywhere]/0 [anywhere]/0 reject-with icmp-port-unreachable Chain ufw-user-limit-accept (0 references) target prot opt source destination ACCEPT all -- [anywhere]/0 [anywhere]/0 Chain ufw-user-logging-forward (0 references) target prot opt source destination Chain ufw-user-logging-input (0 references) target prot opt source destination Chain ufw-user-logging-output (0 references) target prot opt source destination Chain ufw-user-output (1 references) target prot opt source destination
It looks like all my sites choose the default PHP7.2, for some reason. And not the PHP version I set in ISPconfig settings. Hmm..
It is. Ubuntu 18.04 is PHP7.2, and is still. But I have installed PHP7.3 and 7.4 too, and in ISPconfig its set to PHP7.4, but still it shows PHP7.2 if I add a phpinfo file. In php7.2-fpm.log I see these messages, could it be relevant? Code: [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=7, "/var/lib/php7.2-fpm/web14.sock" [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=7, "/var/lib/php7.2-fpm/web14.sock" [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=8, "/var/lib/php7.2-fpm/web15.sock" [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=8, "/var/lib/php7.2-fpm/web15.sock" [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=9, "/var/lib/php7.2-fpm/web17.sock" [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=9, "/var/lib/php7.2-fpm/web17.sock" [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=10, "/var/lib/php7.2-fpm/web21.sock" [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=10, "/var/lib/php7.2-fpm/web21.sock" [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=11, "/var/lib/php7.2-fpm/web22.sock" [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=11, "/var/lib/php7.2-fpm/web22.sock" [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=12, "/var/lib/php7.2-fpm/web25.sock" [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=12, "/var/lib/php7.2-fpm/web25.sock" [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=13, "/var/lib/php7.2-fpm/web26.sock" [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=13, "/var/lib/php7.2-fpm/web26.sock" [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=14, "/var/lib/php7.2-fpm/web31.sock" [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=14, "/var/lib/php7.2-fpm/web31.sock" [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=15, "/var/lib/php7.2-fpm/web5.sock" [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=15, "/var/lib/php7.2-fpm/web5.sock" [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=16, "/run/php/php7.2-fpm.sock" [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=16, "/run/php/php7.2-fpm.sock" [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=17, "/var/lib/php7.2-fpm/web3.sock" [14-Feb-2021 20:31:02] NOTICE: using inherited socket fd=17, "/var/lib/php7.2-fpm/web3.sock"
What I'm saying is the default version in ISPConfig should be PHP 7.2 aswell. Use additional PHP versions if you want to use a different version like PHP 7.4.
I do this already. ISPconfig is 7.2. And I have 7.3 and 7.4 to additional PHP versions and it has always been working until now recently after updating it by "apt-get upgrade". After the upgrade, if I set PHP7.4 in one of my sites config, it still picks 7.2 no matter what. free picture hosting sites free picture hosting sites picture
apache2-suexec-pristine is already the newest version (2.4.29-1ubuntu4.14). a2enmod suexec Module suexec already enabled
As an aside: what is the missing label in PHP-FPM settings after "Path to the PHP-FPM pool directory"? I remember it was discussed on this Forum previously but I could not find the thread. And what if anything should be written there?
So this could be the issue, or what should be in this field? If this is any help, when I upgraded ISPConfig I needed to do this to make ISPconfig panel show.. chmod 660 /usr/local/ispconfig/interface/lib/config.inc.php chmod 660 /usr/local/ispconfig/interface/lib/classes/IDS/../../../temp