Ticket #1080 (closed defect: fixed)

Opened 3 years ago

Last modified 22 months ago

regression: webmail creation broken

Reported by: anarcat Owned by: anarcat
Priority: block Milestone: alternc-0.9.9
Component: Bureau: domaines Version: alternc-0.9.7
Severity: crash Keywords:
Cc:

Description

when creating a webmail subdomain, we get the following error when accessing the domain from a webpage:

Warning: Unknown(): open_basedir restriction in effect. File(/var/alternc/bureau/admin/webmail/index.php) is not within the allowed path(s): (/var/alternc/html/l/librenux/:/usr/share/drupal/:/var/alternc/dns/redir:/usr/share/php/:/var/alternc/tmp:/tmp/) in Unknown on line 0
Warning: Unknown(/var/alternc/bureau/admin/webmail/index.php): failed to open stream: Operation not permitted in Unknown on line 0
Warning: (null)() [function.include]: Failed opening '/var/alternc/bureau/admin/webmail/index.php' for inclusion (include_path='.:/usr/share/php:/usr/share/pear') in Unknown on line 0

existing webmail domains work.

Change History

Changed 3 years ago by anarcat

  • owner changed from anonymous to anarcat
  • status changed from new to assigned

This is a problem with basedir_prot.sh, that obviously puts a openbasedir protection when it shouldn't.

Probably around line 53:

53: if readlink "$i" | grep -q '/var/alternc/bureau/admin/webmail/*$' \ 54: readlink "$i" | grep -q '/var/alternc/bureau/*$'

Changed 3 years ago by anarcat

  • status changed from assigned to closed
  • resolution set to fixed

(In [2050]) don't add the openbasedir protection on webmail. Closes: #1080

Changed 22 months ago by anarcat

(In [2277]) fix webmail redirection by redirecting to https://FQDN instead of the same domain

this is to encourage better security practices by forcing users to use HTTPS and a canonical URL.

eventually, this is a step towards getting rid of the global /webmail/ alias too.

See #170 See #101 See #1080

Changed 22 months ago by anarcat

  • milestone changed from alternc-0.9.8 to alternc-0.9.9
Note: See TracTickets for help on using tickets.