• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion
  • Inviting everyone to the UX test of a new security feature in the WP Toolkit
    For WordPress site owners, threats posed by hackers are ever-present. Because of this, we are developing a new security feature for the WP Toolkit. If the topic of WordPress website security is relevant to you, we would be grateful if you could share your experience and help us test the usability of this feature. We invite you to join us for a 1-hour online session via Google Meet. Select a convenient meeting time with our friendly UX staff here.

getting error 403 after opening site

Darko Bazulj

Basic Pleskian
plesk : 12.0.18 Update #60
os : centos 7

I'm getting error 403 after opening site.

I found that problem was that apache user wasn't member of psasrv group.

If site was run under FastCGI then I was still getting error 403.
Then I added user nginx to psasrv group and site started to work.

Is it normal that users apache and nginx are members of psasrv group?

If yes maybe something happened during installation?
 
Yes, apache user should be member of psaserv group. It is correct behaviour. Otherwise Apache does not have permission to read the vhost folder.
 
just to confirm if same thing is correct for nginx user?

Now I have this

psaserv:x:1003:psaadm,psaftp,apache,nginx
psacln:x:1004:

Is this all right for normal installation?

Thanks Igor.
 
Yes, the same for nginx. Default settings:
Code:
# cat /etc/group | grep psaserv
psaserv:x:502:psaadm,psaftp,apache,nginx
 
Igor thank you for confirmation.

I have one more question because I can't find it in documentation.

I can't find details about psasrv & psacln groups in documentation.
Do you have maybe some links or if you can write something about them?

I also plan to implement mod_ruid2 to get speed and security, is this OK with plesk?
 
mod_ruid2 - good to know when that version get stable and I will do upgrade

psasrv & psacln

just general info for what they are used, standard configuration, why psacln is empty and when we put something in it.
In linux documentation such information are missing while in windows documentation I can see lots of information about security and some about psasrv & psacln groups.
Just to learn more about plesk.

When I had problem error 403 I did lots of googling before I solved problem.
Then I also found next KB http://kb.odin.com/en/120112
 
Back
Top