.htaccess not accessible by apache Debian Trixie

[MeinerEiner]

Hello,

we have 3 froxlor (version 2.2.6, debian trixie, PHP-FPM, PHP8.4.x) systems, 2 works fine, if we create a new customer with domain. On one system it is faulted, an error occurs for domian (also if I open webalyzer):

[Mon Apr 21 10:34:28.730401 2025] [core:crit] [pid 1032037:tid 1032037] (13)Permission denied: [client xx.xxx.xxx.xxx:51055] AH00529: /var/customers/webs/Test/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable and that '/var/customers/webs/Test/' is executable

So i checked the libnss-extrausers configurations and versions on all three systems and they are identically

version 

libnss-extrausers              0.6-6

nssswitch.conf:

# Make sure that `passwd`, `group` and `shadow` have extrausers in their lines
# You should place extrausers at the end, so that it is queried after the other mechanisams
#
passwd:         compat extrausers
group:          compat extrausers
shadow:         compat extrausers

hosts:       files dns
networks:    files dns

services:    db files
protocols:   db files
rpc:         db files
ethers:      db files
netmasks:    files
netgroup:    files
bootparams:  files

automount:   files
aliases:     files

nscd.conf:

#
# /etc/nscd.conf
#
# An example Name Service Cache config file.  This file is needed by nscd.
#
# WARNING: Running nscd with a secondary caching service like sssd may lead to
#          unexpected behaviour, especially with how long entries are cached.
#
# Legal entries are:
#
#	logfile			<file>
#	debug-level		<level>
#	threads			<initial #threads to use>
#	max-threads		<maximum #threads to use>
#	server-user             <user to run server as instead of root>
#		server-user is ignored if nscd is started with -S parameters
#       stat-user               <user who is allowed to request statistics>
#	reload-count		unlimited|<number>
#	paranoia		<yes|no>
#	restart-interval	<time in seconds>
#
#       enable-cache		<service> <yes|no>
#	positive-time-to-live	<service> <time in seconds>
#	negative-time-to-live   <service> <time in seconds>
#       suggested-size		<service> <prime number>
#	check-files		<service> <yes|no>
#	persistent		<service> <yes|no>
#	shared			<service> <yes|no>
#	NOTE: Setting 'shared' to a value of 'yes' will accelerate the lookup,
#	      but those lookups will not be counted as cache hits
#	      i.e. 'nscd -g' may show '0%'.
#	max-db-size		<service> <number bytes>
#	auto-propagate		<service> <yes|no>
#
# Currently supported cache names (services): passwd, group, hosts, services
#


#	logfile			/var/log/nscd.log
#	threads			4
#	max-threads		32
#	server-user		nobody
#	stat-user		somebody
	debug-level		0
#	reload-count		5
	paranoia		no
#	restart-interval	3600

	enable-cache		passwd		yes
	positive-time-to-live	passwd		600
	negative-time-to-live	passwd		20
	suggested-size		passwd		211
	check-files		passwd		yes
	persistent		passwd		yes
	shared			passwd		yes
	max-db-size		passwd		33554432
	auto-propagate		passwd		yes

	enable-cache		group		yes
	positive-time-to-live	group		3600
	negative-time-to-live	group		60
	suggested-size		group		211
	check-files		group		yes
	persistent		group		yes
	shared			group		yes
	max-db-size		group		33554432
	auto-propagate		group		yes

	enable-cache		hosts		yes
	positive-time-to-live	hosts		3600
	negative-time-to-live	hosts		20
	suggested-size		hosts		211
	check-files		hosts		yes
	persistent		hosts		yes
	shared			hosts		yes
	max-db-size		hosts		33554432

	enable-cache		services	yes
	positive-time-to-live	services	28800
	negative-time-to-live	services	20
	suggested-size		services	211
	check-files		services	yes
	persistent		services	yes
	shared			services	yes
	max-db-size		services	33554432

	enable-cache		netgroup	yes
	positive-time-to-live	netgroup	28800
	negative-time-to-live	netgroup	20
	suggested-size		netgroup	211
	check-files		netgroup	yes
	persistent		netgroup	yes
	shared			netgroup	yes
	max-db-size		netgroup	33554432

 

#/var/lib/extrausers seems to be correct. www-data is in all groups

 

Any idea?

[d00p]

a) with libnss-extrausers you do not need nscd, remove it

b) check the customer's homedir permissions, see error message: "ensure it is readable and that '/var/customers/webs/Test/' is executable"

[MeinerEiner]

So I checked permissiins on customrs web, they are right.

I do a nscd -i group and nscd -i passwd and restart service php8.4-fpm restart and now it works.

I purged nscd and reboot the system and it seems to work!

 

Thank you sooo much for fast response 😉