[solved] cluster mirror : websites permissions not in /etc

Discussion in 'Installation/Configuration' started by electronico_nc, Nov 21, 2018.

  1. Hello everybody,

    So after a migration to a 'mirror cluster', server1 websites permissions are OK (all users / groups are well in /etc) after a few websites resync.
    But on server2 (mirror : is mirror of server1), users and group are not all in /etc/passwd, group, shadow, gshadow (some are there, others not).

    Example for server1:
    Code:
    ls -lha /var/www/clients/client37/web81/
    total 40K
    drwxr-xr-x 10 web81 client37 4,0K nov.   4 17:15 .
    drwxr-xr-x  7 root  root     4,0K mai   18  2015 ..
    drwxr-xr-x  2 web81 client37 4,0K mai   18  2015 cgi-bin
    drwxr-xr-x  2 root  root     4,0K nov.  22 00:03 log
    drwx--x---  2 web81 client37 4,0K mai   18  2015 private
    drwx------  2 web81 client37 4,0K nov.   4 17:15 .ssh
    drwxr-xr-x  2 root  root     4,0K mai   18  2015 ssl
    drwxrwx---  2 web81 client37 4,0K mai   18  2015 tmp
    drwx--x--x 27 web81 client37 4,0K nov.  21 15:04 web
    drwx--x---  2 web81 client37 4,0K mai   18  2015 webdav
    for server2:
    Code:
    ls -lha /var/www/clients/client37/web81/
    total 40K
    drwxr-xr-x 10 10081 10081 4,0K nov.  15 12:23 .
    drwxr-xr-x  7 root  root  4,0K nov.  15 12:19 ..
    drwxr-xr-x  2 10081 10081 4,0K nov.  15 12:23 cgi-bin
    drwxr-xr-x  2 root  root  4,0K nov.  22 00:04 log
    drwx--x---  2 10081 10081 4,0K nov.  15 12:23 private
    drwx------  2 10081 10081 4,0K nov.  15 12:23 .ssh
    drwxr-xr-x  2 root  root  4,0K nov.  15 12:23 ssl
    drwxrwx---  2 10081 10081 4,0K nov.  15 12:23 tmp
    drwx--x--x 27 10081 10081 4,0K nov.  15 12:32 web
    drwx--x---  2 10081 10081 4,0K nov.  15 12:23 webdav
    On both servers the System / Server config / Web / Permissions / Connect Linux userid to webid is well checked.
    MySQL master/master replication is running OK on both servers (Bind files are well replicated on server2 by ISPConfig mirror function).
    Unison for websites and Dovecot dsync for emails are running as expected.

    Questions :
    Is there any command I could launch on server2 to force /etc files synced with database ?
    Should I manually edit /etc files to make websites permissions OK ?

    Thanks in advance !
     
  2. pwck and grpck are showing same kind of results on both servers (had to delete lines because of 10 000 characters limit):
    server1:
    Code:
    pwck
    user 'lp': directory '/var/spool/lpd' does not exist
    user 'news': directory '/var/spool/news' does not exist
    user 'uucp': directory '/var/spool/uucp' does not exist
    user 'list': directory '/var/list' does not exist
    user 'irc': directory '/var/run/ircd' does not exist
    user 'gnats': directory '/var/lib/gnats' does not exist
    user 'nobody': directory '/nonexistent' does not exist
    user 'syslog': directory '/home/syslog' does not exist
    user 'messagebus': directory '/nonexistent' does not exist
    user '_apt': directory '/nonexistent' does not exist
    user 'ntp': directory '/nonexistent' does not exist
    user 'mysql': directory '/nonexistent' does not exist
    user 'dovenull': directory '/nonexistent' does not exist
    user 'memcache': directory '/nonexistent' does not exist
    pwck: no changes
    
    grpck
    'www-data' is a member of the 'client3' group in /etc/group but not in /etc/gshadow
    ...
    'www-data' is a member of the 'client182' group in /etc/group but not in /etc/gshadow
    server2:
    Code:
    pwck
    user 'lp': directory '/var/spool/lpd' does not exist
    user 'news': directory '/var/spool/news' does not exist
    user 'uucp': directory '/var/spool/uucp' does not exist
    user 'list': directory '/var/list' does not exist
    user 'irc': directory '/var/run/ircd' does not exist
    user 'gnats': directory '/var/lib/gnats' does not exist
    user 'nobody': directory '/nonexistent' does not exist
    user 'syslog': directory '/home/syslog' does not exist
    user 'messagebus': directory '/nonexistent' does not exist
    user '_apt': directory '/nonexistent' does not exist
    user 'ntp': directory '/nonexistent' does not exist
    user 'mysql': directory '/nonexistent' does not exist
    user 'dovenull': directory '/nonexistent' does not exist
    user 'memcache': directory '/nonexistent' does not exist
    pwck: no changes
    
    grpck
    'www-data' is a member of the 'client19' group in /etc/group but not in /etc/gshadow
    ...
    'www-data' is a member of the 'client103' group in /etc/group but not in /etc/gshadow
     
  3. till

    till Super Moderator Staff Member ISPConfig Developer

    electronico_nc likes this.
  4. Thanks for the answer till !
    Unfortunately, this doesn't show anything (debug mode already activated on both nodes)
    Code:
    /usr/local/ispconfig/server/server.sh
              
    
    23.11.2018-07:36 - DEBUG - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'.
    23.11.2018-07:36 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
    finished.
     
  5. OK I found the reason ...
    Websites with no webx:clientx permissions on node2 are inactive.
    Simply activate them has created the user and group, then desactivate them removed only vhost symlink.
    So basically, there was no problem and I was afraid for no reason.
    I learnt more about ISPConfig, that's a good point !
     
    Last edited: Nov 22, 2018
    till likes this.
  6. Reason why server1 had user/group is that migration has been made on server1, then server2 (is mirror of server1) was added, but websites have been disabled between migration and mirroring operation.
     

Share This Page