Hello everybody, So after a migration to a 'mirror cluster', server1 websites permissions are OK (all users / groups are well in /etc) after a few websites resync. But on server2 (mirror : is mirror of server1), users and group are not all in /etc/passwd, group, shadow, gshadow (some are there, others not). Example for server1: Code: ls -lha /var/www/clients/client37/web81/ total 40K drwxr-xr-x 10 web81 client37 4,0K nov. 4 17:15 . drwxr-xr-x 7 root root 4,0K mai 18 2015 .. drwxr-xr-x 2 web81 client37 4,0K mai 18 2015 cgi-bin drwxr-xr-x 2 root root 4,0K nov. 22 00:03 log drwx--x--- 2 web81 client37 4,0K mai 18 2015 private drwx------ 2 web81 client37 4,0K nov. 4 17:15 .ssh drwxr-xr-x 2 root root 4,0K mai 18 2015 ssl drwxrwx--- 2 web81 client37 4,0K mai 18 2015 tmp drwx--x--x 27 web81 client37 4,0K nov. 21 15:04 web drwx--x--- 2 web81 client37 4,0K mai 18 2015 webdav for server2: Code: ls -lha /var/www/clients/client37/web81/ total 40K drwxr-xr-x 10 10081 10081 4,0K nov. 15 12:23 . drwxr-xr-x 7 root root 4,0K nov. 15 12:19 .. drwxr-xr-x 2 10081 10081 4,0K nov. 15 12:23 cgi-bin drwxr-xr-x 2 root root 4,0K nov. 22 00:04 log drwx--x--- 2 10081 10081 4,0K nov. 15 12:23 private drwx------ 2 10081 10081 4,0K nov. 15 12:23 .ssh drwxr-xr-x 2 root root 4,0K nov. 15 12:23 ssl drwxrwx--- 2 10081 10081 4,0K nov. 15 12:23 tmp drwx--x--x 27 10081 10081 4,0K nov. 15 12:32 web drwx--x--- 2 10081 10081 4,0K nov. 15 12:23 webdav On both servers the System / Server config / Web / Permissions / Connect Linux userid to webid is well checked. MySQL master/master replication is running OK on both servers (Bind files are well replicated on server2 by ISPConfig mirror function). Unison for websites and Dovecot dsync for emails are running as expected. Questions : Is there any command I could launch on server2 to force /etc files synced with database ? Should I manually edit /etc files to make websites permissions OK ? Thanks in advance !
pwck and grpck are showing same kind of results on both servers (had to delete lines because of 10 000 characters limit): server1: Code: pwck user 'lp': directory '/var/spool/lpd' does not exist user 'news': directory '/var/spool/news' does not exist user 'uucp': directory '/var/spool/uucp' does not exist user 'list': directory '/var/list' does not exist user 'irc': directory '/var/run/ircd' does not exist user 'gnats': directory '/var/lib/gnats' does not exist user 'nobody': directory '/nonexistent' does not exist user 'syslog': directory '/home/syslog' does not exist user 'messagebus': directory '/nonexistent' does not exist user '_apt': directory '/nonexistent' does not exist user 'ntp': directory '/nonexistent' does not exist user 'mysql': directory '/nonexistent' does not exist user 'dovenull': directory '/nonexistent' does not exist user 'memcache': directory '/nonexistent' does not exist pwck: no changes grpck 'www-data' is a member of the 'client3' group in /etc/group but not in /etc/gshadow ... 'www-data' is a member of the 'client182' group in /etc/group but not in /etc/gshadow server2: Code: pwck user 'lp': directory '/var/spool/lpd' does not exist user 'news': directory '/var/spool/news' does not exist user 'uucp': directory '/var/spool/uucp' does not exist user 'list': directory '/var/list' does not exist user 'irc': directory '/var/run/ircd' does not exist user 'gnats': directory '/var/lib/gnats' does not exist user 'nobody': directory '/nonexistent' does not exist user 'syslog': directory '/home/syslog' does not exist user 'messagebus': directory '/nonexistent' does not exist user '_apt': directory '/nonexistent' does not exist user 'ntp': directory '/nonexistent' does not exist user 'mysql': directory '/nonexistent' does not exist user 'dovenull': directory '/nonexistent' does not exist user 'memcache': directory '/nonexistent' does not exist pwck: no changes grpck 'www-data' is a member of the 'client19' group in /etc/group but not in /etc/gshadow ... 'www-data' is a member of the 'client103' group in /etc/group but not in /etc/gshadow
My guess is that server2 is not able to connect to server1 and therefore it had not written any config (and no web users). That you see the files is because they are synced by unison, but probably the whole config and users are missing on node 2. Run server.sh in debug mode on server2 to see if it works. https://www.faqforge.com/linux/debugging-ispconfig-3-server-actions-in-case-of-a-failure/
Thanks for the answer till ! Unfortunately, this doesn't show anything (debug mode already activated on both nodes) Code: /usr/local/ispconfig/server/server.sh 23.11.2018-07:36 - DEBUG - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'. 23.11.2018-07:36 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock finished.
OK I found the reason ... Websites with no webx:clientx permissions on node2 are inactive. Simply activate them has created the user and group, then desactivate them removed only vhost symlink. So basically, there was no problem and I was afraid for no reason. I learnt more about ISPConfig, that's a good point !
Reason why server1 had user/group is that migration has been made on server1, then server2 (is mirror of server1) was added, but websites have been disabled between migration and mirroring operation.