After Update 403 access forbidden wrong permissions

[GunFood]

As metioned in the horde stoped working thread, here is me other problem.

I did the Base Packaged Update (Dez 10, 2009). After it, every newly created Domain isn't accessable. I get a 403 forbidden error.

I fixed it by running

chmod 755 /var/www/vhosts/domain/httpdocs

But I can't do this every time a customer creates a new Domain or Subdomain!

Skeleton looks ok:
cgi-bin 4.00 KB rwx r-x r-x Okt 16, 2009 root root
error_docs 4.00 KB rwx r-x r-x Okt 16, 2009 root root
httpdocs 4.00 KB rwx r-x r-x Okt 16, 2009 root root
httpsdocs 4.00 KB rwx r-x r-x Okt 16, 2009 root root

but it doesn't have the correct permissions:

# ls -la
total 28K
drwxr-xr-x 7 root root 4.0K Dec 22 15:28 .
drwxr-xr-x 5 root psaserv 4.0K Dec 22 15:28 ..
drwxr-x--- 3 web0 psaserv 4.0K Dec 22 15:28 cgi-bin
drwxr-x--- 2 root psaserv 4.0K Dec 22 15:28 conf
drwxr-x--- 2 root psaserv 4.0K Dec 22 15:28 error_docs
drwxr-x--- 5 web0 psaserv 4.0K Dec 22 15:28 httpdocs
drwxr-x--- 5 web0 psaserv 4.0K Dec 22 15:28 httpsdocs

Any suggestions?

Thanks for your help.

 

[IgorG]

Try to install with autoinstaller all available latest updates, then run 'websrvmng -v -a' and check it again. Update thread with results.

 

[GunFood]

Hi,

thanks for your answer.
I did:
autoinstaller --reinstall-patch

I got:

Downloading the file PSA_9.2.3/update-rpm-CentOS-5-x86_64/update-9.2.3-cos5-x86_64.hdr.gz: 10%..20%..30%..40%..50%..60%..70%..80%..90%..100% done.
Downloading the file PSA_9.2.3/dist-rpm-CentOS-5-x86_64/build-9.2.3-cos5-x86_64.hdr.gz: 10%..20%..30%..40%..50%..60%..70%..80%..90%..100% done.
Downloading the file PSA_9.2.3/thirdparty-rpm-CentOS-5-x86_64/thirdparty-9.2.3-cos5-x86_64.hdr.gz: 11%..22%..31%..40%..52%..60%..72%..81%..93%..100% done.
Determining the packages that need to be installed.
Installing patches...
Downloading the file PSA_9.2.3_MU/microupdates/common/get_password.php: skipped because of md5 checksum match.
The packages were installed successfully.

But it didn't help.
I created a new domain and got:

total 28K
drwxr-xr-x 7 root root 4.0K Dec 23 08:54 .
drwxr-xr-x 5 root psaserv 4.0K Dec 23 08:54 ..
drwxr-x--- 3 web0 psaserv 4.0K Dec 23 08:54 cgi-bin
drwxr-x--- 2 root psaserv 4.0K Dec 23 08:54 conf
drwxr-x--- 2 root psaserv 4.0K Dec 23 08:54 error_docs
drwxr-x--- 5 web0 psaserv 4.0K Dec 23 08:54 httpdocs
drwxr-x--- 5 web0 psaserv 4.0K Dec 23 08:54 httpsdocs

This night, I think a cronjob, changed all permissions. Many of my old domains didn't work. I fixed the permissions by hand. But I will run the cronjob daily again, to see if it will changed back again.

 

[IgorG]

Very strange. I never heard about such problem. Seems it is your specific issue and I can suggest you check all crontab scripts if you think that problem is there.

 

[MaxZ]

Hello Gunfood,

sorry I have no actual solution to your problem, I just wanted to ask you to please keep us posted in this thread, because I probably won't do the upgrade until your issue is resolve. Have had too many problems with plesk autoupdates already!

Thanks,

Max

 

[MariusP]

Try adding "apache" to the psaserv group in /etc/group

It should look something like this:

psaserv:x:2523saftp,psaadm,apache

 

[RegisteredU]

Same problem here.

"Access forbidden!

You don't have permission to access the requested directory. There is either no index document or the directory is read-protected.

If you think this is a server error, please contact the webmaster.
Error 403"

Every created domain on the server shows this error. Nothing else has been installed nor configured. It's a pretty naked system. So the error MUST come from plesk.