Problem creating new sites

Discussion in 'ISPConfig 3 Priority Support' started by edworcs, May 17, 2013.

  1. edworcs

    edworcs New Member

    Hi,

    Non standard / unusual configuration:

    • Centos 5.8
    • DRBD
    • Using /usr/sbin/drbdlinks

    We upgraded from ISPConfig 3.0.3 to 3.0.5.2.

    We can't create any new sites on the server.

    Shortened debug says:


    Code:
    17.05.2013-13:57 - DEBUG - Action aborted, target is a symlink: /var/www/clients/client2/web157
    17.05.2013-13:57 - DEBUG - Removing vhost file: /etc/httpd/conf/sites-available/foobar.deleteme.jp.vhost
    17.05.2013-13:57 - DEBUG - Removing website: /var/www/clients/client2/web157
    17.05.2013-13:57 - DEBUG - Removing symlink: /var/www/foobar.deleteme.jp
    The "Action aborted, target is a symlink" seems to be the problem here?

    My guess is this is because /var/www is part of the DRBD setup? Its actual true path is /data/var/www

    If we compare the /server/lib/classes/system.inc.php between version 3.0.3 and 3.0.5.2 we can see multiple new instances of:

    Code:
    $allow_symlink = false
    Do we need to edit the system.inc.php to $allow_symlink = true, or is there a better solution?

    Thanks,

    Ed
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    No,this would allow your clients or someone who hacked a site to attack your server.

    The solution is to delete the symlink /var/www and replace it with a bind mount in /etc/fstab, similimar to the bind mounts that are added for the log directories in ispconfig 3.0.5.x.
     
  3. edworcs

    edworcs New Member

    Hi Till,

    Many thanks for the speedy reply. Much appreciated.

    It looks like I need to add something like this is /etc/fstab

    Code:
    /var/www /data/var/www    none    bind,nobootwait    0 0
    and then modify /etc/drbdlinks.conf to remove

    Code:
    link('/var/www')
    and then add

    Code:
    link('/var/www', '/data/var/www')
    I'll get on and research this. Not used Bind Mounts before!

    Thanks again,

    Ed
     

Share This Page