can't start apache anymore: AH00543: apache2: bad user name xxx

[YourDoom]

Hi,

I searched for this for a while and found many threads about this problem, but nothing worked for me.

When I create a customer in froxlor it is not possible to reload apache anymore:

 

AH00543: apache2: bad user name xxx

(xxx is the user name)

 

I tested for a while and it's because of the "_normal_" config file:

 

SuexecUserGroup "xxx" "xxx"

(when I remove it I can start apache but get 403 on the customers website)

 

The apache module "suexec" is enabled.

The directory of the customer has mod 750 and the owner and group is 1000x (no name, just a number).

The html file has the same owner but mod 644.

When I change this I can access the website, but I would like to fix this problem.

 

I already tried replacing User and Group in apache2.conf:

 

#User ${APACHE_RUN_USER}

#Group ${APACHE_RUN_GROUP}

User www-data

Group www-data

But it doesn't work.

 

 

$ /etc/init.d/apache2 reload

> Reloading apache2 configuration (via systemctl): apache2.serviceJob for apache2.service failed. See 'systemctl status apache2.service' and 'journalctl -xn' for details.

 failed!

 

Do you have any idea? Thank you very much I would love to use froxlor

[d00p]

Froxlor uses virtual users, which are read from the database. This is required if you use FCGID or PHP-FPM, you should install and configure libnss-mysql

[YourDoom]

ok thank you, this was the only thing that I couldn't install, I had to add the wheezy sources to install it now and it nearly worked.

apache isn't crashing anymore, but I still get 403 forbidden.

the folder is owned by suat3:suat3, has mod 0750 and the index file inside has 0644.

i tested a little bit and when i give that folder execute permissions for world (0751) it works.

 

do I have to configure anything else? did I forgot anything? thank you for your support

[d00p]

Maybe this video helps you find the missing piece:

 

[YourDoom]

Hi,

I currently use FCGID, do you recommend FPM?

 

What I realized is, that in your video you get fastcgi configurations for apache, but I don't:

(or is it right for users without fpm?)

[d00p]

both, FCGID and fpm, are pretty much the same thing, just pick one  - i was posting the video because of the libnss-mysql stuff...The fastcgi config is a FPM thing, if you don't see it you don't need it (froxlor shows this if fpm is enabled only)

[YourDoom]

Ok,

I tested it a little while.

I created a new customer and  tried "nscd --invalidate=group" and than i reloaded apache and it worked immediately.

 

But I have to do it everytime, do you have an idea?

[d00p]

possibly anytime you add a new customer - it's kind of a debian problem, i was not able to reproduce this on any other distro yet

[YourDoom]

if someone else has this problem, too:

i just added these lines:

			// remove nscd cache
			safe_exec("nscd --invalidate=group");

in file scripts/jobs/cron_tasks.php

on line 85

before the reload()

and it worked

 

thank you very much for your support