Uupss... I did it again. New sites owned by root

Discussion in 'General' started by SamTzu, Sep 26, 2016.

  1. SamTzu

    SamTzu Active Member

    I'm trying to combine several cluster members in to one new ISPconfig 3 server but run in to interesting problem. Somewhere along the line when I was importing users from old clusters I accidentally over wrote something somewhere (most likely user account problem in /etc/shadow file modification). In my tests all new users created in the new ISPconfig server are created with the root user. So the new user (web690) did not get created in /etc/shadow.
    For instance... I can see ISPconfig creating a proper folder structure for a new web690 site but site permissions are root:client114 not web690:client114 as it should. If I try to manually change the site permissions I get "invalid user: web690" because such user was not created.

    Can any one wiser point me in the right direction here? I'm thinking somewhere along the line when I was importing user data with PHPmyAdmin I over wrote something that caused this?

    Sam
     
  2. hsluis

    hsluis New Member

    Hi Sam,
    Recently I convert my single installation on multi server setup, and I found this error:
    Code:
    root@web:/var/www/clients/client15# ls -l web1/
    total 32
    drwxr-xr-x  2 root root 4096 Sep 19 22:04 backup
    drwxr-x--x  2 5004 5022 4096 Sep 19 22:04 cgi-bin
    drwxr-xr-x  2 root root 4096 Sep 20 17:27 log
    drwx--x---  2 5004 5022 4096 Sep 26  2015 private
    drwxr-xr-x  2 root root 4096 Jan 21  2013 ssl
    drwxr-xr-x  2 root root 4096 Sep 13 22:45 tmp
    drwx--x--x 23 5004 5022 4096 Aug 12 08:33 web
    drwx--x---  2 5004 5022 4096 May 30  2013 webdav
    
    I solved it by going to "System" --> "Server Config" --> Select my Web Server --> Select "Web" Tab --> On bottom "Permissions" options Check "Set folder permissions on update" --> Save. Make a "Resync Websites". And now everything work fine:
    Code:
    root@web:/var/www/clients/client15# ls -l web1/
    total 32
    drwxr-xr-x  2 root root     4096 Sep 19 22:04 backup
    drwxr-x--x  2 web1 client15 4096 Sep 19 22:04 cgi-bin
    drwxr-xr-x  2 root root     4096 Sep 20 17:27 log
    drwx--x---  2 web1 client15 4096 Sep 26  2015 private
    drwxr-xr-x  2 root root     4096 Jan 21  2013 ssl
    drwxrwx---  2 web1 client15 4096 Sep 13 22:45 tmp
    drwx--x--x 23 web1 client15 4096 Aug 12 08:33 web
    drwx--x---  2 web1 client15 4096 May 30  2013 webdav
    Tried this, I hope you get helpful!
     
    Jesse Norell likes this.
  3. SamTzu

    SamTzu Active Member

    That did not work for me. You actually have a user called "5004" there while I got "root".
    Code:
    root@net:/var/www# ls -ahl test3.s1.ic4.eu/web/
    total 36K
    drwx--x--x 4 root client115 4.0K Sep 30 11:53 .
    drwxr-xr-x 9 root root      4.0K Sep 30 11:53 ..
    drwxr-xr-x 2 root client115 4.0K Sep 30 11:53 error
    -rwxr-xr-- 1 root root      7.2K Sep 30 11:53 favicon.ico
    -rwxr-xr-- 1 root root        26 Sep 30 11:53 .htaccess
    -rwxr-xr-- 1 root root      1.9K Sep 30 11:53 index.html
    -rwxr-xr-- 1 root root        14 Sep 30 11:53 robots.txt
    drwxr-xr-x 2 root root      4.0K Sep 30 11:53 stats
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Please check if you have a group named "sshusers". If it don't exist, and it on the shell and try to create a website again to see if the webXXX user gets created then.
     
  5. SamTzu

    SamTzu Active Member

    I think till is on to something. I seem to have copied all the sshusers groups from all the cluster members :(
    So there are several sshusers groups which is propably what ruins the user creation.
    Code:
    root@net:/var/www# cat /etc/group |grep ssh
    ssh:x:114:
    sshusers:x:5002:web1
    sshusers:x:1000:web20,web207,web252,web278,web398,web421,web480,web539,web584,web629,web644,web645,web664,web666,web677,web680,web681
    sshusers:x:1000:web303,web396,web404,web425,web449,web466,web510,web520,web571,web592,web625,web640,web654,web656
    
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Remove all sshusers lines from /etc/group and /etc/gshadow files except the one that you think is the right one for this server (the one that contains the web users of this local node).
     
  7. SamTzu

    SamTzu Active Member

    I have said it before and I will say it again... Till. You are the man!
    thx
     
    till likes this.

Share This Page