Issue with Ownership / Permission of ISPCP

[Macsloverd]

I have tried to search the forum for solutions but no luck, so I guess I have to post a new thread for this problem.

I have a production ISPCP 1.0.7 on Ubuntu server 10.10 which was running great without any issue. Then one day I was trying to install some PHP extension by using 'aptitude' and it suggested remove php5 (and someting else) first in order to install that extension (???), but I did not actually think about it so just hit Enter to confirm, then the whole web server was no longer working (of course, no php5). I realized this so I 'aptitude install php5'. web server was back but admin panel and websites were not working (blank page for admin panel, and other issues for websites depending on what system). Finally I found out that the permission is wrong so that apache2 (or ispcp) is no longer the 'right one' to control the website, so I used the 'set permission gui' script to fix it with no luck. Then I 'chmod -R 777 *' with ispcp gui and other website, then it worked. Later, I also 'chmod -R 755 *' && 'chown -R www-data:www-data *', it also worked but FTP and other related function did not because of 'permission denined'. So I guess 'apache2 is no longer vu2000' or 'ispcp is no longer vu2000'. My question is 'How can I change the ispcp or apache2 back to normal'?

Any help is appreciated and thanks in advance.

[joximu]

Without more infos I assume you did run php5 with fcgid (or fastcgi) and now you run it via mod_php.

apach2ctl -M

which of the modules is loaded? (one of the three)

You should setup the box to what you used before!

/J

[Macsloverd]

Thanks for the heads-up. I 'apache2ctl -M' and I got:

Code:

Loaded Modules:
core_module (static)
log_config_module (static)
logio_module (static)
mpm_prefork_module (static)
http_module (static)
so_module (static)
actions_module (shared)
alias_module (shared)
auth_basic_module (shared)
authn_file_module (shared)
authz_default_module (shared)
authz_groupfile_module (shared)
authz_host_module (shared)
authz_user_module (shared)
autoindex_module (shared)
cgi_module (shared)
deflate_module (shared)
dir_module (shared)
env_module (shared)
fastcgi_module (shared)
fcgid_module (shared)
mime_module (shared)
negotiation_module (shared)
php5_module (shared)
reqtimeout_module (shared)
rewrite_module (shared)
setenvif_module (shared)
ssl_module (shared)
status_module (shared)
suexec_module (shared)
Syntax OK

Are these high-lighted what you mean? Have I just loaded 3 of them all together? Sorry for the lo-tech questions...

And yes, 'set up the box to what you used before' is exactly what I am trying to achieve, it is just that I am not sure where to start with.

Thanks....

(01-23-2011 07:50 AM)joximu Wrote:  Without more infos I assume you did run php5 with fcgid (or fastcgi) and now you run it via mod_php.

apach2ctl -M

which of the modules is loaded? (one of the three)

You should setup the box to what you used before!

/J

[joximu]

It really looks like you have enabled all the mods...

ok, please have a look in the /etc/ispcp/ispcp.conf

line starting "PHP_FASTCGI ="
whats behind?

and then remove the symlnks in /etc/apache2/mod_enabled which you don't use.

E.g: I use fcgid:

Code:

# ls -l /etc/apache2/mods-enabled/*cgi*
lrwxrwxrwx 1 root root 27  8. Okt 14:55 /etc/apache2/mods-enabled/cgid.conf -> ../mods-available/cgid.conf
lrwxrwxrwx 1 root root 27  8. Okt 14:55 /etc/apache2/mods-enabled/cgid.load -> ../mods-available/cgid.load
lrwxrwxrwx 1 root root 28  9. Jan 23:41 /etc/apache2/mods-enabled/fcgid.conf -> ../mods-available/fcgid.conf
lrwxrwxrwx 1 root root 34 30. Dez 00:13 /etc/apache2/mods-enabled/fcgid_ispcp.conf -> ../mods-available/fcgid_ispcp.conf
lrwxrwxrwx 1 root root 34 30. Dez 00:13 /etc/apache2/mods-enabled/fcgid_ispcp.load -> ../mods-available/fcgid_ispcp.load
lrwxrwxrwx 1 root root 28  9. Jan 23:41 /etc/apache2/mods-enabled/fcgid.load -> ../mods-available/fcgid.load

or fastcgi:

Code:

# ls -l /etc/apache2/mods-enabled/*cgi*
lrwxrwxrwx 1 root root 27  4. Dez 00:24 /etc/apache2/mods-enabled/cgid.conf -> ../mods-available/cgid.conf
lrwxrwxrwx 1 root root 27  4. Dez 00:24 /etc/apache2/mods-enabled/cgid.load -> ../mods-available/cgid.load
lrwxrwxrwx 1 root root 36 11. Dez 14:18 /etc/apache2/mods-enabled/fastcgi_ispcp.conf -> ../mods-available/fastcgi_ispcp.conf
lrwxrwxrwx 1 root root 36 11. Dez 14:18 /etc/apache2/mods-enabled/fastcgi_ispcp.load -> ../mods-available/fastcgi_ispcp.load
lrwxrwxrwx 1 root root 28 10. Dez 01:09 /etc/apache2/mods-enabled/fcgid.conf -> ../mods-available/fcgid.conf
lrwxrwxrwx 1 root root 28 10. Dez 01:09 /etc/apache2/mods-enabled/fcgid.load -> ../mods-available/fcgid.load

hope this helps for further stps....

/J

[Macsloverd]

Thanks for the quick reply!

In the ispcp.conf

PHP_FASTCGI = fastcgi

I 'ls -l /etc/apache2/mods-enabled/*cgi*', I got:

Code:

lrwxrwxrwx 1 root root 26 2011-01-13 21:58 /etc/apache2/mods-enabled/cgi.load -> ../mods-available/cgi.load
lrwxrwxrwx 1 root root 36 2010-12-17 00:53 /etc/apache2/mods-enabled/fastcgi_ispcp.conf -> ../mods-available/fastcgi_ispcp.conf
lrwxrwxrwx 1 root root 36 2010-12-17 00:53 /etc/apache2/mods-enabled/fastcgi_ispcp.load -> ../mods-available/fastcgi_ispcp.load
lrwxrwxrwx 1 root root 28 2011-01-12 08:05 /etc/apache2/mods-enabled/fcgid.conf -> ../mods-available/fcgid.conf
lrwxrwxrwx 1 root root 28 2011-01-12 08:05 /etc/apache2/mods-enabled/fcgid.load -> ../mods-available/fcgid.load

it seems that I am missing one file (compare with your fastcgi config):

Code:

lrwxrwxrwx 1 root root 27  4. Dez 00:24 /etc/apache2/mods-enabled/cgid.conf -> ../mods-available/cgid.conf

Could this be the problem? If so, how do I fix it?

Thanks a lot!

(01-23-2011 11:24 PM)joximu Wrote:  It really looks like you have enabled all the mods...

ok, please have a look in the /etc/ispcp/ispcp.conf

line starting "PHP_FASTCGI ="
whats behind?

and then remove the symlnks in /etc/apache2/mod_enabled which you don't use.

E.g: I use fcgid:

Code:

# ls -l /etc/apache2/mods-enabled/*cgi*
lrwxrwxrwx 1 root root 27  8. Okt 14:55 /etc/apache2/mods-enabled/cgid.conf -> ../mods-available/cgid.conf
lrwxrwxrwx 1 root root 27  8. Okt 14:55 /etc/apache2/mods-enabled/cgid.load -> ../mods-available/cgid.load
lrwxrwxrwx 1 root root 28  9. Jan 23:41 /etc/apache2/mods-enabled/fcgid.conf -> ../mods-available/fcgid.conf
lrwxrwxrwx 1 root root 34 30. Dez 00:13 /etc/apache2/mods-enabled/fcgid_ispcp.conf -> ../mods-available/fcgid_ispcp.conf
lrwxrwxrwx 1 root root 34 30. Dez 00:13 /etc/apache2/mods-enabled/fcgid_ispcp.load -> ../mods-available/fcgid_ispcp.load
lrwxrwxrwx 1 root root 28  9. Jan 23:41 /etc/apache2/mods-enabled/fcgid.load -> ../mods-available/fcgid.load

or fastcgi:

Code:

# ls -l /etc/apache2/mods-enabled/*cgi*
lrwxrwxrwx 1 root root 27  4. Dez 00:24 /etc/apache2/mods-enabled/cgid.conf -> ../mods-available/cgid.conf
lrwxrwxrwx 1 root root 27  4. Dez 00:24 /etc/apache2/mods-enabled/cgid.load -> ../mods-available/cgid.load
lrwxrwxrwx 1 root root 36 11. Dez 14:18 /etc/apache2/mods-enabled/fastcgi_ispcp.conf -> ../mods-available/fastcgi_ispcp.conf
lrwxrwxrwx 1 root root 36 11. Dez 14:18 /etc/apache2/mods-enabled/fastcgi_ispcp.load -> ../mods-available/fastcgi_ispcp.load
lrwxrwxrwx 1 root root 28 10. Dez 01:09 /etc/apache2/mods-enabled/fcgid.conf -> ../mods-available/fcgid.conf
lrwxrwxrwx 1 root root 28 10. Dez 01:09 /etc/apache2/mods-enabled/fcgid.load -> ../mods-available/fcgid.load

hope this helps for further stps....

/J

[joximu]

ok, so we need to come back to fastcgi config.

the cgid.* is not important.

check if you have a file (symlink) in mods-enabled with "php" in its name....

this might be the mod_php thing and with a2dismod modname you can disable it (or just remove the symlink).

If you wonder what I have in the folder:

Code:

# ls -l | cut -f2- -d":" | cut -f2- -d" "
actions.conf -> ../mods-available/actions.conf
actions.load -> ../mods-available/actions.load
alias.conf -> ../mods-available/alias.conf
alias.load -> ../mods-available/alias.load
auth_basic.load -> ../mods-available/auth_basic.load
authn_file.load -> ../mods-available/authn_file.load
authz_default.load -> ../mods-available/authz_default.load
authz_groupfile.load -> ../mods-available/authz_groupfile.load
authz_host.load -> ../mods-available/authz_host.load
authz_user.load -> ../mods-available/authz_user.load
autoindex.conf -> ../mods-available/autoindex.conf
autoindex.load -> ../mods-available/autoindex.load
cgid.conf -> ../mods-available/cgid.conf
cgid.load -> ../mods-available/cgid.load
deflate.conf -> ../mods-available/deflate.conf
deflate.load -> ../mods-available/deflate.load
dir.conf -> ../mods-available/dir.conf
dir.load -> ../mods-available/dir.load
env.load -> ../mods-available/env.load
fastcgi_ispcp.conf -> ../mods-available/fastcgi_ispcp.conf
fastcgi_ispcp.load -> ../mods-available/fastcgi_ispcp.load
fcgid.conf -> ../mods-available/fcgid.conf
fcgid.load -> ../mods-available/fcgid.load
mime.conf -> ../mods-available/mime.conf
mime.load -> ../mods-available/mime.load
negotiation.conf -> ../mods-available/negotiation.conf
negotiation.load -> ../mods-available/negotiation.load
rewrite.load -> ../mods-available/rewrite.load
setenvif.conf -> ../mods-available/setenvif.conf
setenvif.load -> ../mods-available/setenvif.load
status.conf -> ../mods-available/status.conf
status.load -> ../mods-available/status.load
suexec.load -> ../mods-available/suexec.load

Hope you find it....

after this: run set-engine-permissions and set-gui-permissions scripts from ispcp...

/J

[Macsloverd]

Thanks for coming back....

I compared mine with yours and I got:

Code:

php5.conf -> ../mods-available/php5.conf
php5.load -> ../mods-available/php5.load
reqtimeout.conf -> ../mods-available/reqtimeout.conf
reqtimeout.load -> ../mods-available/reqtimeout.load

that you did not. I don't think the reqtimeout mod has any thing to do with this problem so I 'a2dismond php5' && 'set-gui/engine-permissions' now pma is back (maybe I didn't mention that pma was permission denined as well)!
admin panel is working;
set permission back to 755 && chown to vu20xx for sites, working!

Now seems everything is back to normal!

I was thinking re-install the whole ispcp and backup/restore every site was still bothering me for having no appetite. Now I am happier than ever in less then 24 hours!

I love this system and I love this community!

Thanks for your detailed and step by step instruction, I couldn't have done these without your help!

(01-24-2011 02:11 AM)joximu Wrote:  ok, so we need to come back to fastcgi config.

the cgid.* is not important.

check if you have a file (symlink) in mods-enabled with "php" in its name....

this might be the mod_php thing and with a2dismod modname you can disable it (or just remove the symlink).

If you wonder what I have in the folder:

Code:

# ls -l | cut -f2- -d":" | cut -f2- -d" "
actions.conf -> ../mods-available/actions.conf
actions.load -> ../mods-available/actions.load
alias.conf -> ../mods-available/alias.conf
alias.load -> ../mods-available/alias.load
auth_basic.load -> ../mods-available/auth_basic.load
authn_file.load -> ../mods-available/authn_file.load
authz_default.load -> ../mods-available/authz_default.load
authz_groupfile.load -> ../mods-available/authz_groupfile.load
authz_host.load -> ../mods-available/authz_host.load
authz_user.load -> ../mods-available/authz_user.load
autoindex.conf -> ../mods-available/autoindex.conf
autoindex.load -> ../mods-available/autoindex.load
cgid.conf -> ../mods-available/cgid.conf
cgid.load -> ../mods-available/cgid.load
deflate.conf -> ../mods-available/deflate.conf
deflate.load -> ../mods-available/deflate.load
dir.conf -> ../mods-available/dir.conf
dir.load -> ../mods-available/dir.load
env.load -> ../mods-available/env.load
fastcgi_ispcp.conf -> ../mods-available/fastcgi_ispcp.conf
fastcgi_ispcp.load -> ../mods-available/fastcgi_ispcp.load
fcgid.conf -> ../mods-available/fcgid.conf
fcgid.load -> ../mods-available/fcgid.load
mime.conf -> ../mods-available/mime.conf
mime.load -> ../mods-available/mime.load
negotiation.conf -> ../mods-available/negotiation.conf
negotiation.load -> ../mods-available/negotiation.load
rewrite.load -> ../mods-available/rewrite.load
setenvif.conf -> ../mods-available/setenvif.conf
setenvif.load -> ../mods-available/setenvif.load
status.conf -> ../mods-available/status.conf
status.load -> ../mods-available/status.load
suexec.load -> ../mods-available/suexec.load

Hope you find it....

after this: run set-engine-permissions and set-gui-permissions scripts from ispcp...

/J

[joximu]

You're welcome.