• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

domain crontabs

F

faris

Guest
Can anybody tell me which user domain cron jobs run as? Logically it is as that particular user (e.g. if FTP username for domain.com is XXX, then the cron job would run as XXX, as this is the user that is listed on the page by default)

But how can that be, if such users don't have shell access?

And to confuse things even more, Help for the ctontab section says:

"Note: Plesk administrator can create the scheduled tasks that will be run on the server on behalf of user root. If you wish to restrict usage of the root account, create an empty file with name root.crontab.lock in the location /usr/local/psa/var/."

Does this mean the cron jobs are actually run as root, no matter what username is shown in the crontab drop-down? Surely not?

And if you create this file, then what? Exactly what does it stop?

Any info would be appreciated.

Faris.
 
Hi Faris,

When a FTP user is created for a domain, that means that ftp user is one of the server's user. Depends on the permission, that user might not have a shell access to the server, however, the user will be able to perform certain limited actions in the allowed area ( the vhost's directories).

I am not quite sure about running crontab as root, but as far as I know just choose the user in the list then you should be alright.
 
Thanks Sufia!

Ah. Yes. Of course, because they do own the files in the vhost directory after all. I shall experiment. Thanks!

Faris.
 
Back
Top