Permission denied: /home/airtrade/etc/airtrade.com.tw/passwd passwd this is the error message obtained upon trying to create email accounts in cpanel.
the present permissions of the passwd file is 644 and ownership is username nobody i tried changing it to username.mail but still the same error
i run one bad command :-(
chmod -R 644 /
and this command changes all permision in root server
have any away for fixed all permision in centos?
because all site take error
i use of cpanel
root:x:0:0:root:/root:/bin/bash
bin:x:1:1:bin:/bin:/sbin/nologin
daemon:x:2:2:daemon:/sbin:/sbin/nologin
adm:x:3:4:adm:/var/adm:/sbin/nologin
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
sync:x:5:0ync:/sbin:/bin/sync
shutdown:x:6:0hutdown:/sbin:/sbin/shutdown
halt:x:7:0:halt:/sbin:/sbin/halt
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
news:x:9:13:news:/etc/news:
uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
operator:x:11:0perator:/root:/sbin/nologin
games:x:12:100:games:/usr/games:/sbin/nologin
gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
nobody:x:99:99:Nobody:/:/sbin/nologin
dbus:x:81:81ystem message bus:/:/sbin/nologin
vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
rpm:x:37:37::/var/lib/rpm:/sbin/nologin
haldaemon:x:68:68:HAL daemon:/:/sbin/nologin
netdump:x:34:34:Network Crash Dump user:/var/crash:/bin/bash
nscd:x:28:28:NSCD Daemon:/:/sbin/nologin
sshd:x:74:74rivilege-separated SSH:/var/empty/sshd:/sbin/nologin
rpc:x:32:32ortmapper RPC user:/:/sbin/nologin
rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin
smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin
pcap:x:77:77::/var/arpwatch:/sbin/nologin
xfs:x:43:43:X Font Server:/etc/X11/fs:/sbin/nologin
htt:x:100:101:IIIMF Htt:/usr/lib/im:/sbin/nologin
canna:x:39:39:Canna Service User:/var/lib/canna:/sbin/nologin
wnn:x:49:49:Wnn Input Server:/var/lib/wnn:/sbin/nologin
named:x:25:25:Named:/var/named:/sbin/nologin
mysql:x:101:102:MySQL server:/var/lib/mysql:/bin/bash
mailman:x:32001:32001::/usr/local/cpanel/3rdparty/mailman:/bin/bash
cpanel:x:32002:32003::/usr/local/cpanel:/bin/bash
johnny:x:32003:32004::/home/dorn:/usr/local/cpanel/bin/noshell
angel:x:32004:32005::/home/angeliq:/bin/false
clamav:x:32015:32017:Clam AntiVirus:/home/clamav:/bin/false
I heard it may pose a security risk for those unneeded users. Which lines can I remove?
i been wonder today when i try to login my account @box by SSH 21
the password is changed i think!
and when i see the logs files there is no stranger ip!
and there is no email about changeing password for my mail!
i tried to log in by another account in my server and trying to su root permission by my password
but passwd incorect!
and i change the Mysql root passwd and same thing
my support they sleep before 3 days so i should to figure my problem alone...
how to reset my root ssh passwd?
am useing Plesk VPS ...
I have been googling this for a while but am not getting anywhere. Curiosity has gotten the best of me, what are the passwd- and shadow- files used for? The date and time stamps for both the passwd- and passwd files are exactly the same, as are the shadow- and shadow files.
Are they automatically-created backups of the passwd and shadow files?
how can i save /etc/passwd there is many linux order which show my users on server
such as :
cat /etc/passwd
cat /var/cpanel/acounting.log
ls -la /etc/valiases
ls /var/named
-----------------
and how can i disable the geting orders
such as :
wget
curl -o
lynx
We have CentOS and WHM 11 on the server. Also we have PHP 4.4.4 and open base dir enabled on the server . We have a shared server with many website configured on it.
Now The user uses the following PHP code and can see the /etc/passwd file
=============================================
<?
echo ini_get("safe_mode");
echo ini_get("open_basedir");
include("/etc/passwd");
ini_restore("safe_mode");
ini_restore("open_basedir");
echo ini_get("safe_mode");
echo ini_get("open_basedir");
include("/etc/passwd");
?>
============================================
Now how to stop this. This is a security hole. how to stop this.
It there any good way to stop using from reading /etc/passwd?
I have suPHP enabled and open_basedir enabled by WHM too. But it seems susphp ignores open_basedir restrictions?
Here is virtual host config:
<VirtualHost x.x.x.x:80>
<IfModule concurrent_php.c>
php4_admin_value open_basedir "/home/xxx/:/usr/lib/php:/usr/php4/lib/php:/usr/local/lib/php:/usr/local/php4/lib/p$
php5_admin_value open_basedir "/home/xxx/:/usr/lib/php:/usr/local/lib/php:/tmp"
</IfModule>
<IfModule !concurrent_php.c>
<IfModule mod_php4.c>
php_admin_value open_basedir "/home/xxx/:/usr/lib/php:/usr/php4/lib/php:/usr/local/lib/php:/usr/local/php4/li$
</IfModule>
<IfModule mod_php5.c>
php_admin_value open_basedir "/home/xxx/:/usr/lib/php:/usr/local/lib/php:/tmp"
</IfModule>
<IfModule sapi_apache2.c>
php_admin_value open_basedir "/home/xxx/:/usr/lib/php:/usr/php4/lib/php:/usr/local/lib/php:/usr/local/php4/li$
</IfModule>
</IfModule>
ServerName xxx.com
ServerAlias www.xxx.com
DocumentRoot /home/xxx/public_html
ServerAdmin webmaster@xxx.com
UseCanonicalName Off
CustomLog /usr/local/apache/domlogs/xxx.com combined
CustomLog /usr/local/apache/domlogs/xxx.com-bytes_log "%{%s}t %I .
%{%s}t %O ."
## User xxx # Needed for Cpanel::ApacheConf
<IfModule mod_suphp.c>
suPHP_UserGroup xxx xxx
</IfModule>
<IfModule !mod_disable_suexec.c>
SuexecUserGroup xxx xxx
</IfModule>
ScriptAlias /cgi-bin/ /home/xxx/public_html/cgi-bin/
DocumentRoot /home/xxx/public_html
ServerAdmin webmaster@xxx.com
UseCanonicalName Off
CustomLog /usr/local/apache/domlogs/xxx.com combined
CustomLog /usr/local/apache/domlogs/xxx.com-bytes_log "%{%s}t %I .
%{%s}t %O ."
## User xxx # Needed for Cpanel::ApacheConf
<IfModule mod_suphp.c>
suPHP_UserGroup xxx xxx
</IfModule>
<IfModule !mod_disable_suexec.c>
SuexecUserGroup xxx xxx
</IfModule>
ScriptAlias /cgi-bin/ /home/xxx/public_html/cgi-bin/
# To customize this VirtualHost use an include file at the following location
# Include "/usr/local/apache/conf/userdata/std/2/xxx/xxx.com/*.conf"
</VirtualHost>
Scripts are running with user's UID, and that is fine, but it can still read /etc/passwd file for example.
How to fix that? Is it really open_basedir value is ignored by susphp? It works fine if I remove suphp and run scripts with nobody uid.
I set up a new account for a client using my reseller. He went to change the password and he is getting this error
There was an error manipulating the password file. This generally means you entered your old password incorrectly.
Changing password for user xxxxx.
Changing password for xxxxx
(current) UNIX password:
passwd: Authentication token manipulation error
The thing is, he is putting the password in correct. I made sure of that
I am able to change it in whm and i am able to log in to the account, i just cant change the password from cpanel
We've had a customer do something strange to their server. They were playing with /etc/passwd or /etc/shadow or similar (not quite sure of the details) but the upshot is booting the server into single user and trying to reset the password via passwd gives
passwd root (and any user)
passwd: Authentication token manipulation error
So far I've
Replaced /etc/passwd* and /etc/shadow* with a copy from another server
Turned off SeLinux
/etc/pam.d/passwd is fine
Root file system is r/w
I have a VPS with Ubuntu 9.04. I've setup ISPConfig etc as per the Perfect Server Howto Forge pages.
However I'm getting a problem with the configuration of maildrop, I get
Code:
temporary failure. Command output: ERR: authdaemon: s_connect() failed: Permission denied /usr/bin/maildrop: Unable to change to home directory.
ls -lah /var/vmail
Code:
drwxr-xr-x 4 vmail vmail 4.0K Jul 27 04:19 .
drwxr-xr-x 15 root root 4.0K Jul 26 13:01 ..
-rw------- 1 vmail vmail 1.3K Jul 26 13:01 .mailfilter
drwxr-xr-x 5 vmail vmail 4.0K Jul 26 17:15 siricom.co.uk
-rw-rw---- 1 vmail vmail 4 Jul 27 04:19 ispconfig_mailsize
drwxr-xr-x 2 root root 4.0K Jul 26 13:01 mailfilters
grep vmail /etc/passwd
Code:
vmail:5000:5000::/home/vmail:/bin/sh
I just got a barebone server. Installed apache2, php5, mysql,phpmyadmin.
I only have SSH access to the server. I wish to use CoreFTP to transfer some webpage files to /var/www folder. I can login the server using CoreFTP's SSH/SFTP and it displays all the files and directories, but I do not have the permission to write.
My question is, how do I give myself permission to write? Here is the id of my user:
uid=1000(charlie) gid=1000(charlie) groups=1000(charlie),4(adm),20(dialout),24(cdrom),46(plugdev),110(lpadmin),111(sambashare),112(admin)
each time I try to change things on file [php.ini] using shell, I get this massage
[ Error writing /usr/local/lib/php.ini: Permission denied ]
how to change Permission for that file, and what Permissions it should be.
I have root access for the server
I'm trying connect to the server via ssh and i get an error -
Permission denied (publickey).
Following information has been provided for me help to access the server, but it seems i'm not familiar how to use that info ....
I made a copy of my forum's root folder using SSH command: cp -r forum forum123
Then I tried to update the new (forum123) folder with the latest files from vBulletin.
And it gave me a permission denied error. For test purpose, I went to the original folder and uploaded one of the new files there and it worked flawlessly.
Why am I not able to upload files to the copied folder? I've been doing this since like for ever, this is the first time I've encountered such an error.
I installed Avenger on FreeBSD 6.2 as Anti-Spam and I'm not understand
some configuration.
1- Avenger as me to create a user 'avenger' in group 'wheel' for its program, but when starts asmtpd , it runs under user: root and group: wheel . What is the utility to create this user 'avenger' then?
2- When I run a Debug Mod, I obtain a permission denied error
myserver:/etc/mail># asmtpd --avenge m...@mydomain.com
SMTP-test (6) <== 220 myserver.mydomain.net ESMTP
SMTP-test (6) ==> ehlo myserver.mydomain.net
SMTP-test (6) <== 250-myserver.mydomain.net
SMTP-test (6) <== 250 PIPELINING
SMTP-test (6) ==> mail from:<postmas...@myserver.mydomain.net>
SMTP-test (6) <== 250 ok
SMTP-test (6) ==> rcpt to:<m...@mydomain.com>
asmtpd: loading /etc/avenger/domains
db_dump185: /etc/mail/virtusertable.db: Permission denied
/etc/mail/aliases.db: Permission denied
/etc/mail/aliases.db: bad alias file
SMTP-test (6) <== 250 ok
+unknown (a11) === EOF
accepted by SMTP server:
250 ok
Ok so the error was coming from my "Other group" can't read . I have changed permission to following:
chmod r+o /etc/mail/virtusertable.db
and I obtain this:
myserver:/etc/mail># asmtpd --avenge m...@mydomain.com
SMTP-test (6) <== 220 myserver.mydomain.net ESMTP
SMTP-test (6) ==> ehlo myserver.mydomain.net
SMTP-test (6) <== 250-myserver.mydomain.net
SMTP-test (6) <== 250 PIPELINING
SMTP-test (6) ==> mail from:<postmas...@myserver.mydomain.net>
SMTP-test (6) <== 250 ok
SMTP-test (6) ==> rcpt to:<m...@mydomain.com>
asmtpd: loading /etc/avenger/domains
+unknown (a11) ==> return 250 ok
SMTP-test (6) <== 250 ok
+unknown (a11) === EOF
accepted by SMTP server:
250 ok
It could be a potential security problem if I left "Other" to read virtusertable.db . So my question is: Is there another way to fix this error without changing permission for Other to read virtusertable.db?
I were seeing c99.php source code to know how it gets /etc/passwd file. it simply uses fopen() for this goal but I think fopen() is needed and I don't like it to be disabled in disabled_functions. I wonder how can I disable just fopen("/etc/passwd","r"); without doing any restriction to fopen function at all
View 8 Replies View Related# cd /usr/src
# wget ftp://ftp.kaybee.org/pub/linux/logwatch-7.3.6.tar.gz
# tar -xvzf logwatch-7.3.6.tar.gz
# cd logwatch*
# ./install_logwatch.sh
-bash: ./install_logwatch.sh: Permission denied
I'm migrating from shared hosting to a VPS. I have transferred my files right over, and permissions are all the same as they were on the old server.
The fopen scripts are giving me an error when trying to write to files.
Code:
failed to open stream: Permission denied
The permissions on the file are 644 and it can read from the file just fine. Giving the file world write permissions fixes the problem, but I don't want to do this for obvious reasons.
I think the reason this worked on the shared server had something to do with the apache user being defined differently but I'm honestly not sure. The php file executing the command is owned by the user that owns the document I'm trying to write to (in fact one user owns everything).
how I can fix this without giving world write permissions?
I have problem with exim in my dedicated. All days I have more tham 1000 messages in queue. I delete frozen messages and run exim -v -q and after delete all message. Next day I have more that 1000 message in queue.
I see that some local emails was not delivered. So I saw in exim log errors messages as:
===
Message 1K5SHE-0001LE-LS is not frozen
delivering 1K5SHE-0001LE-LS
LOG: MAIN
== dadinho@xx.org R=virtual_user T=virtual_userdelivery defer (13): Permission denied: while opening or reading /home/levarte/mail/xx.org/dadinho/maildirsize
===
But I have not any file called "/home/levarte/mail/xx.org/dadinho/maildirsize"
What means this error message?
For one of may domains I'm receiving the following error when someone tries to send mail to it. Also I never receive the mail as it seems to just sit on the server. When the permission were changed on the file, it seemed to have changed back on its on when ever a new address is added. Any solutions?
421 fopen('users/assign') failed (#5.7.10) Permission denied
Code:
-rw------- 1 root qmail 2772 Apr 22 10:38 assign
Plesk+CentOs
so after successfully installing and testing litespeed last night along on alternate port 1080 on my cpanel setup, I try to look at my cpanel's awstats this morning and:
Error: Couldn't open server log file "/usr/local/apache/domlogs/example.net" : Permission denied
(awstats has worked fine for 5 weeks now)
Googling for this shows other people with similar problem in the past but unfortunately no answers
I tried chmod -R 644 /usr/local/apache/domlogs
and looks like the owners are still correct
I'm at a loss and really screwed if I can't easily fix soon... any ideas?
(as a side note, litespeed has stopped working properly too but I've killed it for now)
SOCentOS 6.6 (Final)
Plesk12.0.18 Actualización #35
I can not sign with any FTP account.
/var/log/messages:
FTP session opened.
unable to open TransferLog '/usr/local/psa/var/log/xferlog': Too many levels of symbolic links
chroot to '/var/www/vhosts/domain.com' failed for user 'user': Permission denied
error: unable to set DefaultRoot directory
FTP session closed.
Mail isn't leaving the queue, it's returning this error
Feb 12 23:12:01 XXXX postfix-local[64360]: System error .qmail: Permission denied
Feb 12 23:12:01 XXXX postfix-local[64360]: Wrong permissions for .qmail
All the files within /var/qmail/ are set to the user and group "popuser", and have the nessacery rwx permissions for the user/group.
The OS is CentOS.
Since this got lost (google cache of thread discussion so far)
[url]
im reposting because i think it was an interesting discussion.
I'm setting up a cpanel server for the first time. I was wondering if i could harden the default cpanel permissions for the user folders in /home The idea is to prevent users viewing each others files. Please don't suggest the php open_basedir option as its not secure and doesn't work with cgi based file browsers.
Note I'm using suexec/suphp.
currently new cpanel users folders are created with
group and user ownership and the permissions 755
I was thinking if i changed this to 711 would this break anything?
Could i lock this down even more by changing the group ownership to "nobody" and thus have permissions 710.
