• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

FTP rights problem (psacln)

Fritz MichaelG

Basic Pleskian
Let's say I have a subscription with the following hosting parameters:
  • PHP via FastCGI
  • System user: foo
  • FTP Access enabled for system user (SSH access: /bin/bash)

Now, everytime I upload a file via FTP to that subscription, using the system user account foo, the owner:group information of that file will be foo:psacln. However, the Apache Server is unable to read any files (except PHP files) that have the property foo:psacln instead of foo:psaserv for instance, even with 751 permissions (read for everyone). If a file is requested directly via Apache, Apache will only give a 403 Forbidden for that file, as long as the ownership is foo:psacln (and the permissions are 750 (or 770, or 751, etc.; as long as it's not **7)). I always need to change the group of the uploaded files to psaserv manually, in order for them to be directly accessible via Apache.

Why does this happen? Have I misconfigured something?
 
Last edited:
Hi,

The ownership with web content is correct, foo:psacln.

I've encountered a similar problem before. While preforming a recursive ownership change, I accidentally modified the httpdocs folder to foo:psacln. This stopped the web server from being able to access the directory and it's contents. The resolution was to adjust ownership of httpdocs to foo:psaserv, all web content should be foo:psacln.

_Zigge
 
But that's the point - the httpdocs folders do have foo:psaserv, but Apache will refuse to access any assets which have foo:psacln, without read access for "everyone" on those files.
 
Back
Top