avara
05-08-2001, 04:12 PM
When I log into my RaQ 4 in order to chmod a directory, it wont' let me -- permission denied. This happens every time I try to go outside of my own home directory, even though I have "site admin" or whatever it is called privileges.
Any suggestions would be much appreciated.
cheatman
05-08-2001, 04:35 PM
when you login via ftp you are the admin user....
you can basically only access all files and folders in /home/sites/*____**__
what you need to do is login via telnet with your admin password......
then type "su - "
no quotes.....
then type your admin password when you are asked..
then, cd /what/dir/your/file/or/foler/is/in
then type chomd 777 filename
avara
05-08-2001, 05:11 PM
Cheatman, I am aware of that. In fact, I usually just log in as "admin" myself, and then I can chmod any file or folder I want without any hiccups. However, my users will not be able to do this.
kentaurus
05-08-2001, 11:46 PM
your users should be able to chmod their own files. Why would you want them to be able to chmod other files anyway?
avara
05-09-2001, 04:59 AM
Originally posted by kentaurus
your users should be able to chmod their own files. Why would you want them to be able to chmod other files anyway?
What I meant is that they can only chmod files in www.usersdomainname.com/~username, and not www.usersdomainname.com -- even if they are set up as a "Site Administrator".
kentaurus
05-09-2001, 08:22 AM
Seems like a problem with the permissions, try as root with
cd /home/sites/www.theirdomain.com/
chown user.group web
cd web
chown user.group *
Of course changing user.group to the user you want to be able to chmod those files and the group theyt belong to, then they should be able to chmod any file.
avara
05-09-2001, 02:57 PM
I'm beginning to regret getting a RaQ. I should have gotten a *real* server. :D
Originally posted by kentaurus
Seems like a problem with the permissions, try as root with
cd /home/sites/www.theirdomain.com/
chown user.group web
cd web
chown user.group *
Of course changing user.group to the user you want to be able to chmod those files and the group theyt belong to, then they should be able to chmod any file.
Just type
chown -R user.group web
That should chown all the files within the web folder to whoever you want.
cheatman
05-10-2001, 08:52 PM
From my understanding -- if user ABC creates a file called ABCFile.htm then user XYZ cannot edit or chmod this because he did not create it and doesn't own it. if you have WSFTP if you goto the dir the file is in that you need to chmod -- click on dir info and it will list the files and the user who owns the files -- if the user who wants to chmod doesn't have his name beside the file name then he cannot chmod it unless the original user or admin chomds the file to allow access for all users -- 777 or something similar
Users vs. Groups
Access to files are first controlled at the user level then at the group level.
The Owner
The owner of the file has full control. The owner can change the permission settings on any file, modify it, delete it, etc. Provided, of course, the permissions to do so are set properly.
Numbers, Permissions, Syntax
Just a quick reminder:
read = 4
write = 2
exec = 1
none = 0
So read+write+exec = 7
So read = 4
In the triplet, ###.
The first position is the owner's permissions.
The second position is the group's permissions.
The third position is the world's permissions.
Also, when you do a ls -l, you get
-OOOGGGWWW
where OOO specifies the read, write, execute settings for the owner, GGG for the group, WWW for everbody else.
Groups
Group controls are implemented after owner controls. Groups can only do to the file what the file owner has permitted. If groups (others) have read/write access enabled, then they can modify the file; otherwise they will not be able to write to it.
An few examples
-rwxr-xr-x (755)
This give only read and execute to the group, so a member of the group can open or download the file but they cannot write to it.
-rwxrwxr-x (775)
This setting give groups the same control as the owner, except of course they cannot change the permissions of the file.
-rwxrwxrwx (777)
This setting give everyone the same control (read,write, execute) as the owner. This setting should rarely (perhaps never) be used on a machine running virtual servers. This will allow any abritrary user to modify and change the file.
[b]Summary[b]
The Raqs group system uses the standard Linux system. So if you want members of a group to be able to access and modify files in the web directory for the virtual site, then you need to give groups read,write and execute access (775). Only the file owner, admin, or root can change thie permission settings.
Hope this helps ...
joubarani
05-17-2001, 10:04 AM
Hi everybody,
We read your valuable posts and we will explain our problem with permissions hoping to hear from you any solution.
We had a virtual server and worked with many cgi scripts properly on it. We used to use webfolder uploading to upload our files since it's easier to deal with and we had problem using ftp through our ISP.
Now we moved to a cobalt raq 4i dedicated server. We are the only party who has control on the server. We have several virtual sites. We tried to upload cgi files such as file manager to deal with all the files on the server including the virtual sites files.
We faced a permissions problem since the file man were uploaded by ftp and other cgi files were uploaded by wefolder. The ftp uploaded files have its owner as the ftp account owner where any file uploaded with webfolder has nobody owner. We tried to deal with this file man to change permissions, upload file but the file man did not work but it had only function of viewing.
Someone advised us that the problem stemed from using cgi-wrap so we changed addhandler in httpd.conf from cgi-wrapper to cgi0script, but nothing change.
Please advise us to find a solution with this permission problem since the same script was working properly with the old virtual server. We know that some solutions may have security hole but we don't mind because we are the only party who has control over the raq.
Thanks for help.
J. Joubarani