Upgrade 11.5.30 to 12.0.18 >> cannot create directory: Permission denied: "/var/...

[HarmenW]

After upgrade Plesk 11.5.30 to 12.0.18 I first got error 500 message, which where fixed by running:
/usr/local/psa/admin/bin/nginxmng --enable

Then I could login into Plesk, but I keep getting the following message:


I tried a reinstall of plesk-lmlib with:
# yum reinstall ./plesk-lmlib-0.0.4-591.14052818.x86_64.rpm
which installed fine, but didn't help.

The folder does exists and contains the following files and folders (which wheren't there before the install):
# authorizer.lock container.lock root root.lock sleep_storage.lock

What to do now?

 

[nardevb]

I was trying to remove postgresql from plesk and i got similar message:


ERROR: Exception

cannot create directory: Permission denied: "/var/lock/lmlib/container_locks"
Search for related Knowledge Base articles

 

[nardevb]

At the end, i just restarted ./parallels_installer and made some changes on packages.. actually i added postgresql again to the system. Everything works ok now. I didn't loose any data of course...

 

[HarmenW]

I didn't do a clean install, and also have no postgresql installed.

My plesk is running on Virtuozzo 4.7 on a CentOS 6 VM.

I also ran the bootstrapper, which didn't have any effect.

Parallels, please provide a solution.

 

[IgorG]

Make sure that you have the same permissions here:

# stat /var/lock/lmlib/container_locks
File: `/var/lock/lmlib/container_locks'
Size: 4096 Blocks: 8 IO Block: 4096 directory
Device: 19h/25d Inode: 39530294 Links: 3
Access: (0770/drwxrwx---) Uid: ( 0/ root) Gid: ( 499/lock-manager)

 

[HarmenW]

Looks quite the same to me:

# stat /var/lock/lmlib/container_locks
File: `/var/lock/lmlib/container_locks'
Size: 4096 Blocks: 8 IO Block: 4096 directory
Device: 17h/23d Inode: 99101206 Links: 3
Access: (0770/drwxrwx---) Uid: ( 0/ root) Gid: ( 497/lock-manager)

What now?

 

[IgorG]

What is status of SELinux on server?

 

[HarmenW]

# sestatus
SELinux status: disabled

 

[HarmenW]

I restarted to server to be sure I have a clean startup. Afterwards the error occurs before I even can login into Plesk:



All other websites work just fine, so it is something in the Plesk code, I think.

 

[IgorG]

Please read PM from me.

 

[HarmenW]

Dear Igor,

I am trying to reply to your PM, but it doesn't seem to work (in Chrome and IE11).

Is there a problem with the form, or do I not receive any feedback the form has been sent? The messages don't apear in Sent Items...

 

[IgorG]

See my reply in PM.

 

[InsertCoin]

Seeing the same error:

cannot create directory: Permission denied: "/var/lock/lmlib/container_locks"

Any advice on resolution?

 

[InsertCoin]

I managed to fix this. I deleted the /var/lock directory and recreated.

Then when going to http://{domain}:8443 it gave an error about container_locks missing, created that with mkdir and then it said a .lock file was missing, so created that. But the default permissions wouldn't work, tried with the "lock" group same issue, used "lock-manager" and that worked, tried with 644 and 770 permissions, only 777 worked. (each error related to the specific area "failed to create group", failed to access" etc). Then it said another file was missing....

Each .lock file I created with 777 permissions (BAD) and chgrp lock-manager, each directory has the root:root and 644 permissions.

Obviously this isn't a very clean fix, but at least the upgrade from 11.5.30 to 12.0.18 is now working.

# stat /var/lock/lmlib/container_locks
File: `/var/lock/lmlib/container_locks'
Size: 4096 Blocks: 8 IO Block: 4096 directory
Device: 803h/2051d Inode: 1969900 Links: 3
Access: (0777/drwxrwxrwx) Uid: ( 0/ root) Gid: ( 496/lock-manager)
Access: 2014-06-13 12:13:07.843799898 +0100
Modify: 2014-06-13 12:12:32.448799269 +0100
Change: 2014-06-13 12:13:35.079799840 +0100

If the permissions are 770 then it doesnt work!

Also had to create the directory /var/lock/subsys/

Permissions I used to get it working:

# file: var/lock
# owner: root
# group: root
user::rwx
group::r-x
other::r-x

# file: var/lock/subsys
# owner: root
# group: root
user::rwx
group::r-x
other::r-x

# file: var/lock/subsys/psa-pc-remote
# owner: root
# group: root
user::rw-
group::r--
other::r--

# file: var/lock/subsys/courier-pop3d
# owner: root
# group: root
user::rw-
group::---
other::---

# file: var/lock/subsys/courier-imaps
# owner: root
# group: root
user::rw-
group::---
other::---

# file: var/lock/subsys/sw-engine-fpm
# owner: root
# group: root
user::rw-
group::r--
other::r--

# file: var/lock/subsys/courier-authdaemon
# owner: root
# group: root
user::rw-
group::---
other::---

# file: var/lock/subsys/courier-imapd
# owner: root
# group: root
user::rw-
group::---
other::---

# file: var/lock/subsys/postfix
# owner: root
# group: root
user::rw-
group::r--
other::r--

# file: var/lock/subsys/courier-pop3s
# owner: root
# group: root
user::rw-
group::---
other::---

# file: var/lock/subsys/xinetd
# owner: root
# group: root
user::rw-
group::r--
other::r--

# file: var/lock/subsys/httpd
# owner: root
# group: root
user::rw-
group::r--
other::r--

# file: var/lock/subsys/psa
# owner: root
# group: root
user::rw-
group::r--
other::r--

# file: var/lock/lmlib
# owner: root
# group: root
user::rwx
group::r-x
other::r-x

# file: var/lock/lmlib/container_locks
# owner: root
# group: lock-manager
user::rwx
group::rwx
other::rwx

# file: var/lock/lmlib/container_locks/root
# owner: root
# group: root
user::rwx
group::r-x
other::r-x

# file: var/lock/lmlib/container_locks/root/node.1.lock
# owner: root
# group: lock-manager
user::rwx
group::rwx
other::rwx

# file: var/lock/lmlib/container_locks/root/global.lock
# owner: root
# group: lock-manager
user::rwx
group::rwx
other::rwx

# file: var/lock/lmlib/container_locks/root/global
# owner: root
# group: root
user::rwx
group::r-x
other::r-x

# file: var/lock/lmlib/container_locks/root/global/service.lock
# owner: root
# group: lock-manager
user::rwx
group::rwx
other::rwx

# file: var/lock/lmlib/container_locks/root/global/service
# owner: root
# group: root
user::rwx
group::r-x
other::r-x

# file: var/lock/lmlib/container_locks/root/global/service/config.lock
# owner: root
# group: lock-manager
user::rwx
group::rwx
other::rwx

# file: var/lock/lmlib/container_locks/root/global/service/web.lock
# owner: root
# group: lock-manager
user::rwx
group::rwx
other::rwx

# file: var/lock/lmlib/container_locks/root/node.1
# owner: root
# group: root
user::rwx
group::r-x
other::r-x

# file: var/lock/lmlib/container_locks/root/node.1/service.lock
# owner: root
# group: lock-manager
user::rwx
group::rwx
other::rwx

# file: var/lock/lmlib/container_locks/root/node.1/service
# owner: root
# group: root
user::rwx
group::r-x
other::r-x

# file: var/lock/lmlib/container_locks/root/node.1/service/config.lock
# owner: root
# group: lock-manager
user::rwx
group::rwx
other::rwx

# file: var/lock/lmlib/container_locks/sleep_storage.lock
# owner: root
# group: lock-manager
user::rwx
group::rwx
other::rwx

# file: var/lock/lmlib/container_locks/authorizer.lock
# owner: root
# group: lock-manager
user::rwx
group::rwx
other::rwx

# file: var/lock/lmlib/container_locks/container.lock
# owner: root
# group: lock-manager
user::rwx
group::rwx
other::rwx

# file: var/lock/lmlib/container_locks/root.lock
# owner: root
# group: lock-manager
user::rwx
group::rwx
other::rwx

# file: var/lock/plesk
# owner: root
# group: root
user::rwx
group::r-x
other::r-x