• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion

Adding access permissions using the hosting_template.xml file

AndorA

Basic Pleskian
Despite great documentation in the Plesk for Windows Advanced Administration guide, I have the feeling I am really misunderstanding something fundamental about the use of the hosting_template.xml file. I hope there's someone who can tell me what I'm doing wrong.

What I want to do is the following. I have an application server that is running under a specific Windows user account (for security reasons I don't want to run it under SYSTEM or NETWORK SERVICE). The only problem is that this user accounts needs to have access to all my virtual domains httpdocs folder. If I add it manually, my sites run just fine. If I don't add it, no sites for me. :(

Now, as I understand it, Plesk will allow me to add security rules to the hosting_template.xml file, so that the Windows user account under which my service runs will have access to all newly created virtual directories' httpdocs folders. However, when adding a rule for a hosting template, an attribute called 'Tag' is mandatory. Whatever tag I choose (I tried all that were specificied on http://download1.parallels.com/Ples...nistration-guide/index.htm?fileName=49496.htm), it either throws an error or just refuses to add my custom permissions. Unfortunately, the documentation on these tags is thin. I can add a tag to add a psaadm account, or a "anonymous IIS user", but all I want to do is add the Windows user account under which my service is running. No tag seems appropriate for that.

Here is why I think I misunderstand something. To me, it seems like three attribuates define exactly the same thing: Account, SidStr, and Tag. An account name I have, and SidStr as well, but how can I find a tag for my custom created Windows user?

I also tried to edit the DiskSecurity.xml file. This works perfect - it adds my Windows user with the exact right permissions to all my files in the virtual host parent directory, even to all the default directories Plesk places there. But NOT to my virtual host folders, the only folders that I actually want to edit.

Any hint here would be greatly appreciated!

Andor
 
Back
Top