CentOS 7 WHM/Cpanel Active Directory Permissions

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP











up vote
0
down vote

favorite












We are setting up a development environment in the office with a dedicated web server running WHM.



This server is joined to the domain



realm join --user=administrator example.com


and the ssh access is setup along with the permissions. Issues arise when WHM creates a new Cpanel account.



From what I understand CPanel creates a user/group combo for each cpanel account. So adding our AD users to group created by cpanel should allows us to edit the files, but that is not the case.



usermod -aG newcpanelgroup username


Than try to access the files or list the files in that new cpanel account returns.



ls: cannot open directory .: Permission denied


but sudo ls will list the directory contents of the account. What permissions am I missing or not setting that this is failing? or is there no support for AD users?



Adding the permissions of the root /vhosts/ where cpanel is set to create the accounts. Listing the directory contents at this level works without issue. The example account on the server is simpleoffice.



drwx--x--x. 13 simpleoffice simpleoffice 4096 May 21 10:06 simpleoffice


Entering the root of the simpleoffice directory is also not an issue. But trying to access any of the directories below it give permission denied. Here are the permissions listed as su.



drwxr-x---. 3 simpleoffice mail 45 May 21 10:06 etc
drwx------. 2 simpleoffice simpleoffice 6 May 21 10:06 logs
drwxr-x--x. 10 simpleoffice simpleoffice 147 May 21 10:06 mail
drwxr-x---. 3 simpleoffice simpleoffice 22 May 21 10:06 public_ftp
drwxr-x---. 4 simpleoffice simpleoffice 40 May 21 10:07 public_html
drwxr-xr-x. 5 simpleoffice simpleoffice 77 May 21 10:06 ssl
drwxr-xr-x. 2 simpleoffice simpleoffice 6 May 21 10:06 tmp
lrwxrwxrwx. 1 simpleoffice simpleoffice 11 May 21 10:06 www -> public_html






share|improve this question





















  • Could you post the permissions of the location you are attempting to access? It may help determine what the issue could be.
    – GracefulRestart
    May 19 at 18:36










  • @GracefulRestart see updated question.
    – Orlando P.
    May 21 at 14:10














up vote
0
down vote

favorite












We are setting up a development environment in the office with a dedicated web server running WHM.



This server is joined to the domain



realm join --user=administrator example.com


and the ssh access is setup along with the permissions. Issues arise when WHM creates a new Cpanel account.



From what I understand CPanel creates a user/group combo for each cpanel account. So adding our AD users to group created by cpanel should allows us to edit the files, but that is not the case.



usermod -aG newcpanelgroup username


Than try to access the files or list the files in that new cpanel account returns.



ls: cannot open directory .: Permission denied


but sudo ls will list the directory contents of the account. What permissions am I missing or not setting that this is failing? or is there no support for AD users?



Adding the permissions of the root /vhosts/ where cpanel is set to create the accounts. Listing the directory contents at this level works without issue. The example account on the server is simpleoffice.



drwx--x--x. 13 simpleoffice simpleoffice 4096 May 21 10:06 simpleoffice


Entering the root of the simpleoffice directory is also not an issue. But trying to access any of the directories below it give permission denied. Here are the permissions listed as su.



drwxr-x---. 3 simpleoffice mail 45 May 21 10:06 etc
drwx------. 2 simpleoffice simpleoffice 6 May 21 10:06 logs
drwxr-x--x. 10 simpleoffice simpleoffice 147 May 21 10:06 mail
drwxr-x---. 3 simpleoffice simpleoffice 22 May 21 10:06 public_ftp
drwxr-x---. 4 simpleoffice simpleoffice 40 May 21 10:07 public_html
drwxr-xr-x. 5 simpleoffice simpleoffice 77 May 21 10:06 ssl
drwxr-xr-x. 2 simpleoffice simpleoffice 6 May 21 10:06 tmp
lrwxrwxrwx. 1 simpleoffice simpleoffice 11 May 21 10:06 www -> public_html






share|improve this question





















  • Could you post the permissions of the location you are attempting to access? It may help determine what the issue could be.
    – GracefulRestart
    May 19 at 18:36










  • @GracefulRestart see updated question.
    – Orlando P.
    May 21 at 14:10












up vote
0
down vote

favorite









up vote
0
down vote

favorite











We are setting up a development environment in the office with a dedicated web server running WHM.



This server is joined to the domain



realm join --user=administrator example.com


and the ssh access is setup along with the permissions. Issues arise when WHM creates a new Cpanel account.



From what I understand CPanel creates a user/group combo for each cpanel account. So adding our AD users to group created by cpanel should allows us to edit the files, but that is not the case.



usermod -aG newcpanelgroup username


Than try to access the files or list the files in that new cpanel account returns.



ls: cannot open directory .: Permission denied


but sudo ls will list the directory contents of the account. What permissions am I missing or not setting that this is failing? or is there no support for AD users?



Adding the permissions of the root /vhosts/ where cpanel is set to create the accounts. Listing the directory contents at this level works without issue. The example account on the server is simpleoffice.



drwx--x--x. 13 simpleoffice simpleoffice 4096 May 21 10:06 simpleoffice


Entering the root of the simpleoffice directory is also not an issue. But trying to access any of the directories below it give permission denied. Here are the permissions listed as su.



drwxr-x---. 3 simpleoffice mail 45 May 21 10:06 etc
drwx------. 2 simpleoffice simpleoffice 6 May 21 10:06 logs
drwxr-x--x. 10 simpleoffice simpleoffice 147 May 21 10:06 mail
drwxr-x---. 3 simpleoffice simpleoffice 22 May 21 10:06 public_ftp
drwxr-x---. 4 simpleoffice simpleoffice 40 May 21 10:07 public_html
drwxr-xr-x. 5 simpleoffice simpleoffice 77 May 21 10:06 ssl
drwxr-xr-x. 2 simpleoffice simpleoffice 6 May 21 10:06 tmp
lrwxrwxrwx. 1 simpleoffice simpleoffice 11 May 21 10:06 www -> public_html






share|improve this question













We are setting up a development environment in the office with a dedicated web server running WHM.



This server is joined to the domain



realm join --user=administrator example.com


and the ssh access is setup along with the permissions. Issues arise when WHM creates a new Cpanel account.



From what I understand CPanel creates a user/group combo for each cpanel account. So adding our AD users to group created by cpanel should allows us to edit the files, but that is not the case.



usermod -aG newcpanelgroup username


Than try to access the files or list the files in that new cpanel account returns.



ls: cannot open directory .: Permission denied


but sudo ls will list the directory contents of the account. What permissions am I missing or not setting that this is failing? or is there no support for AD users?



Adding the permissions of the root /vhosts/ where cpanel is set to create the accounts. Listing the directory contents at this level works without issue. The example account on the server is simpleoffice.



drwx--x--x. 13 simpleoffice simpleoffice 4096 May 21 10:06 simpleoffice


Entering the root of the simpleoffice directory is also not an issue. But trying to access any of the directories below it give permission denied. Here are the permissions listed as su.



drwxr-x---. 3 simpleoffice mail 45 May 21 10:06 etc
drwx------. 2 simpleoffice simpleoffice 6 May 21 10:06 logs
drwxr-x--x. 10 simpleoffice simpleoffice 147 May 21 10:06 mail
drwxr-x---. 3 simpleoffice simpleoffice 22 May 21 10:06 public_ftp
drwxr-x---. 4 simpleoffice simpleoffice 40 May 21 10:07 public_html
drwxr-xr-x. 5 simpleoffice simpleoffice 77 May 21 10:06 ssl
drwxr-xr-x. 2 simpleoffice simpleoffice 6 May 21 10:06 tmp
lrwxrwxrwx. 1 simpleoffice simpleoffice 11 May 21 10:06 www -> public_html








share|improve this question












share|improve this question




share|improve this question








edited May 21 at 14:10
























asked May 18 at 20:32









Orlando P.

1012




1012











  • Could you post the permissions of the location you are attempting to access? It may help determine what the issue could be.
    – GracefulRestart
    May 19 at 18:36










  • @GracefulRestart see updated question.
    – Orlando P.
    May 21 at 14:10
















  • Could you post the permissions of the location you are attempting to access? It may help determine what the issue could be.
    – GracefulRestart
    May 19 at 18:36










  • @GracefulRestart see updated question.
    – Orlando P.
    May 21 at 14:10















Could you post the permissions of the location you are attempting to access? It may help determine what the issue could be.
– GracefulRestart
May 19 at 18:36




Could you post the permissions of the location you are attempting to access? It may help determine what the issue could be.
– GracefulRestart
May 19 at 18:36












@GracefulRestart see updated question.
– Orlando P.
May 21 at 14:10




@GracefulRestart see updated question.
– Orlando P.
May 21 at 14:10















active

oldest

votes











Your Answer







StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
convertImagesToLinks: false,
noModals: false,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);








 

draft saved


draft discarded


















StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f444705%2fcentos-7-whm-cpanel-active-directory-permissions%23new-answer', 'question_page');

);

Post as a guest



































active

oldest

votes













active

oldest

votes









active

oldest

votes






active

oldest

votes










 

draft saved


draft discarded


























 


draft saved


draft discarded














StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f444705%2fcentos-7-whm-cpanel-active-directory-permissions%23new-answer', 'question_page');

);

Post as a guest













































































Popular posts from this blog

Peggy Mitchell

Palaiologos

The Forum (Inglewood, California)