• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Accidentally changed apache user's groups

S

spincoding

Guest
Hello all,

I have a bit of a problem; for reasons still unknown to me, we won't use PHP through CGI on our hosted domains on our Plesk server. As I wanted to make sure noone should ever use 0777 permissions again, I wanted to add the "psacln" group to the "apache" user. Unfortunately, I forgot the -a argument in the usermod call (usermod -G psacln apache). So it appears all other secondary groups have been removed from the user!

So, now I get 403 forbidden errors on every website. I re-added all groups to the apache user I could think of, which are : apache, psaserv, psacln, which made every website work again, but there are a lot of weird issues popping up here and there (mostly due to caching and the removal of cached files by the apache user)

Could someone let me know which should be the correct primary & secondary groups for the apache user - so I can make sure they're back to their correct state?

FYI, we are running Plesk 9.3.0 on centOS 5 (and also 10.3.1 on Ubuntu, where I also managed to make this mistake after I thought it worked on the other server. On Ubuntu, the apache user is called www-data)

It's a really stupid problem - I know. Didn't think this one through .. !

Thank you for any help in this matter!

Kind regards,
Steven
 
Last edited by a moderator:
Hi,

Sorry for this thread necromancy, but I have a similar problem. Really need someone to help =) Even the cause is the same, except that I am the one that wants to use PHP through CGI.

Plz plz plz. spincoding, if you found the answer, plz let me know =)
 
For anyone in the same situation, I've added the apache user to psaserv, psasb and psaadm groups, like so:
usermod -a -G psaserv,psasb,psaadm apache

Then, restart apache:
httpd -k restart
 
Back
Top