New group of new froxlor user not added to user www-data

[Thorsten]

Hi, 

I'm not a heavy user of froxlor. I use it on my private server with some friends, so I don't add new "customers" regularly. But yesterday I did, and after the user was created, I got an apache error, that apache can't access the html file of the new user. The new user has had the username web33 and username and groupname also has been web33 with directory rights 750.

But the new group web33 hasn't been added to the www-data user under which apache2 is running. I had to add it manually to get everything to work. I can't remember that I had to do it in the past.

 

Best regards
Thorsten

 

[d00p]

froxlor usually adds the virtual users to the group. You can validate by entering the command `id www-data` and see if the group `web33` is in there. Also please provide information about how you integrate php (mod_php, fcgid or fpm) and whether you have libnss-extrausers in use (which you should)

[Thorsten]

Thanks a lot for your quick response.

I use froxlor with fcgid and because I have a debian system I use  libnss-extrauser.

First I thought it was a bug, because I used an old 2.0.x version. I updated today to the latest version, created a new user, but the same thing. The new group hasn't been added to the user www-data

 

[d00p]

And the output of `id www-data`?

You can adjust the webserver user in froxlor -> Settings -> Webserver settings -> Webserver user-name / group-name, validate that it's correct

[Thorsten]

This is the output of id www-data. Just for your information! I added web33 yesterday manually. My new test user I created today (web34) is missing. It wasn't added automatically nor manually

# id www-data
uid=33(www-data) gid=33(www-data) Gruppen=10000(web1),10002(web21),10003(web20),10004(web18),10005(web19),10007(web15),10008(web8),10009(web6),10010(web5),10011(web2),10012(web9),10013(web11),10014(web10),10017(web3),10018(web24),10022(web28),10023(wordpress),10025(web30),10027(web31),10029(web32),10030(web33),10031(web34),33(www-data)

Attached you find the Webserver settings of froxlor. The username / group is www-data

[d00p]

seems to look fine. Whats the exact error message from your opening post you are receiving from apache?

[Thorsten]

You are right. I haven't seen that the new user web34 is there. 

The error message from yesterday, after I created user web33 was:

[Thu Jan 11 16:50:18.509674 2024] [core:crit] [pid 3262916] (13)Permission denied: [client 52.91.234.149:43480] AH00529: /var/www/htdocs/web33/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/var/www/htdocs/web33/' is executable

[d00p]

so does the .htaccess belong to web33 and does it have at least 0640 ?

[Thorsten]

No. .htacess hasn’t exist

[d00p]

Do you by any chance have nscd (still) installed from a previous libnss-mysql configuration or similar? if yes, remove it and restart apache. The permissions and users seem fine

[Thorsten]

You are right. I had nscd installed a long time ago, as it was necessary for froxlor. It is removed now. Thanks a lot for your support!