User running the php scripts?

[yiannos]

Hi all,

As i have mentioned in another topic, I am using Elxis on an ISPconfig infrastructure.

Datahell was kind enough to help me with a permissions problem I had but now I am back with yet another permissions problem.

When ISPconfig creates a website, it changes the perms of the web directory to be owned by the admin user of this website. So, if the site has an admin user such as web1_admin, the files and dirs are choned to the web:web1_admin group and user.

The problem  now is that:
1. The configuration.php file is shown as writeable and its perms cannot be changed by Elxis to the safer unwriteable mode,
2. All other files' perms cannot be changed by Elxis either.

It seems that the php scripts are run by another user (apache:apache maybe? - I am using CentOS). Is there a way to change this? Or should I change my files to be owned by apache:apache?

TIA for any help

[datahell]

First: Enable FTP access over files (from global configuration).
Second go to: Elxis Administration -> Tools -> Chmod
From there you can change permissions and see files/folders owners.

[yiannos]

OK smth weird is happening here:

1. I did a chmod -R 777 * on my web dir
2. I see inside administration that

Code: [Select]

configuration.php : Writeable3. I see that the ftp is On but if I change anything there and Save I get an error:

Code: [Select]

Could not connect to FTP host: xxx.xxxxxx.xx. No change is made to configuration.php file.
4. I try an external ftp client and it connects normally.

I know its a permissions issue but I cannot find it since I have everything to 777.

P.S. I can give you login data for ftp and/or shell access if you want.

[yiannos]

OK, as I continued testing I found the following: [if I say smth stupid please say so]

As I stated above, I am installing Elxis on a ISPconfig system tunning on CentOS 4.4 which is setup as follows:  http://www.howtoforge.com/perfect_setup_centos_4.4

In ISPconfig, when a client and then his site are created, his web directory is chowned to whatever username and group the client has (e.g. client1:client1group). The httpd process though, is ran under the apache:apache user/group. Therefore, I did the following setup that seems to work (I write it here in case smn else is also interested)

1. Upload all elxis files to the web directory.
2. chown all files to apache:apache
3. make the client1 user belong additionaly to group apache (usermod -G)
4. Set the ftp in elxis with user client1
5. Have elxis correct all file permissions through Global Configuration/Server tab - File Creation section.

This way everything seems to work properly. Unfortunately I was not able to make it work with all the files belonging to the ftp user (client1) and not to apache which would be safer. If anyone can hep me to this direction I would be most grateful. I can give any type of access may be needed to my test site if required (shell, ftp)

Thank you for your assistance above.