You are not logged in.
- Topics: Active | Unanswered
Announcement
Download last stable version of GLPI - What can you do for GLPI ? : Contribute
Pages: 1
#1 2024-05-23 10:23:57
- Vicken
- Member
- Registered: 2024-03-04
- Posts: 22
Problem with permissions, but where?
Hi all
Didn't think I was going to post here so soon again, but this has me stumped.
Running GLPI 10.0.15 in IIS 10 with PHP 8.2.15.
When I want to open Setup > General > System the page keeps loading without rendering any information on it. All of the other pages within General are fine except for All (which also has to render information from System).
In the php-errors.php file I see this error everytime I want to access the page:
[2024-05-23 10:12:12] glpiphplog.WARNING: Test logger
[2024-05-23 10:12:12] glpiphplog.WARNING: *** PHP Warning (2): mkdir(): Permission denied in C:\inetpub\wwwroot\glpi_mkt\src\Toolbox.php at line 1233
Backtrace :
src\Toolbox.php:1233 mkdir()
...System\Requirement\DirectoryWriteAccess.php:113 Toolbox::testWriteAccessToDirectory()
src\System\Requirement\AbstractRequirement.php:131 Glpi\System\Requirement\DirectoryWriteAccess->check()
src\System\Requirement\AbstractRequirement.php:212 Glpi\System\Requirement\AbstractRequirement->doCheck()
src\Config.php:1984 Glpi\System\Requirement\AbstractRequirement->isValidated()
src\Config.php:2159 Config::showSystemInfoTable()
src\Config.php:2654 Config->showSystemInformations()
src\CommonGLPI.php:694 Config::displayTabContentForItem()
ajax\common.tabs.php:120 CommonGLPI::displayStandardTab()
public\index.php:82 require()I've tried giving Full Access to the glpi folder (just to test) to Everyone, IIS_IUSRS, Authenticated Users, Users, IIS AppPool\glpi... but to no avail.
It's pretty clear that glpi wants to make a new directory somewhere and it can't, but from the source code it's not entirely clear to me 1. where glpi wants to create the directory and 2. with which user it's trying to create the directory.
If anyone could point me in the right direction I'd greatly appreciate that.
Offline
#2 2024-05-23 13:18:04
- Vicken
- Member
- Registered: 2024-03-04
- Posts: 22
Re: Problem with permissions, but where?
Some extra info: I've reinstalled glpi on that server and it's still the same unfortunately. Anybody has an idea what this possibly could be?
Offline
#3 2024-05-24 09:31:05
- tofou
- Member
- From: Saint-Lô
- Registered: 2007-02-26
- Posts: 96
Re: Problem with permissions, but where?
Hi Vicken,
GLPI does not try to write in its own directory, but its probably one of the log dir or the config dir or the var dir.
Have a look on https://glpi-install.readthedocs.io/en/ … index.html
Running the console with system:check_requirements could give you more information.
Christophe
GLPI : 10.0.16
OS : RH9 + Apache
php : 8.3.11,
MariaDB : 10.11.9
Offline
#4 2024-05-28 10:36:31
- Vicken
- Member
- Registered: 2024-03-04
- Posts: 22
Re: Problem with permissions, but where?
Hi Tofou,
Thanks for your reply! That's indeed part of the problem. I tried implementing the best practice of saving glpi/files/... and glpi/config/... out of the wwwroot directory. I didn't manage to get it to work so I reverted the change but then the problem started happening. I think it's curious that even after a complete reinstall the issue persists. You have any more idea's? Below you can find the output of system:check_requirements
+-----------------------------------------------------+------------+-----------------------------------------------------------------------------------------------------------+
| Requirement | Status | Messages |
+-----------------------------------------------------+------------+-----------------------------------------------------------------------------------------------------------+
| [REQUIRED] PHP Parser | [OK] | |
| [REQUIRED] Sessions configuration | [OK] | |
| [REQUIRED] Allocated memory | [OK] | |
| [REQUIRED] mysqli extension | [OK] | |
| [REQUIRED] PHP core extensions | [OK] | |
| [REQUIRED] curl extension | [OK] | |
| Required for remote access to resources (inventory | | |
| agent requests, marketplace, RSS feeds, ...). | | |
| [REQUIRED] gd extension | [OK] | |
| Required for images handling. | | |
| [REQUIRED] intl extension | [OK] | |
| Required for internationalization. | | |
| [REQUIRED] zlib extension | [OK] | |
| Required for handling of compressed communication | | |
| with inventory agents, installation of gzip | | |
| packages from marketplace and PDF generation. | | |
| [REQUIRED] Sodium ChaCha20-Poly1305 size constant | [OK] | |
| Enable usage of ChaCha20-Poly1305 encryption | | |
| required by GLPI. This is provided by libsodium | | |
| 1.0.12 and newer. | | |
| [REQUIRED] DB engine version | [OK] | |
| [REQUIRED] Previous GLPI version files detection | [OK] | |
| The presence of source files from previous | | |
| versions of GLPI can lead to security issues or | | |
| bugs. | | |
| [REQUIRED] Permissions for log files | [OK] | |
| [REQUIRED] Permissions for GLPI data directories | [OK] | |
| [SUGGESTED] SELinux configuration | [SKIPPED] | |
| [SECURITY] PHP maintained version | [OK] | |
| A PHP version maintained by the PHP community | | |
| should be used to get the benefits of PHP security | | |
| and bug fixes. | | |
| [SECURITY] Safe configuration of web root directory | [SKIPPED] | Checking web server root directory configuration cannot be done on CLI context. |
| Web server root directory should be | | |
| `C:\inetpub\wwwroot\glpi_mkt\public` to ensure | | |
| non-public files cannot be accessed. | | |
| [SECURITY] Safe path for data directories | [INFO] | The following directories should be placed outside "C:\inetpub\wwwroot\glpi_mkt": |
| GLPI data directories should be placed outside web | | ‣ "C:\inetpub\wwwroot\glpi_mkt/files" ("GLPI_VAR_DIR") |
| root directory. It can be achieved by redefining | | ‣ "C:\inetpub\wwwroot\glpi_mkt/files/_cache" ("GLPI_CACHE_DIR") |
| corresponding constants. See installation | | ‣ "C:\inetpub\wwwroot\glpi_mkt/files/_cron" ("GLPI_CRON_DIR") |
| documentation for more details. | | ‣ "C:\inetpub\wwwroot\glpi_mkt/files" ("GLPI_DOC_DIR") |
| | | ‣ "C:\inetpub\wwwroot\glpi_mkt/files/_dumps" ("GLPI_DUMP_DIR") |
| | | ‣ "C:\inetpub\wwwroot\glpi_mkt/files/_graphs" ("GLPI_GRAPH_DIR") |
| | | ‣ "C:\inetpub\wwwroot\glpi_mkt/files/_lock" ("GLPI_LOCK_DIR") |
| | | ‣ "C:\inetpub\wwwroot\glpi_mkt/files/_log" ("GLPI_LOG_DIR") |
| | | ‣ "C:\inetpub\wwwroot\glpi_mkt/files/_pictures" ("GLPI_PICTURE_DIR") |
| | | ‣ "C:\inetpub\wwwroot\glpi_mkt/files/_plugins" ("GLPI_PLUGIN_DOC_DIR") |
| | | ‣ "C:\inetpub\wwwroot\glpi_mkt/files/_rss" ("GLPI_RSS_DIR") |
| | | ‣ "C:\inetpub\wwwroot\glpi_mkt/files/_sessions" ("GLPI_SESSION_DIR") |
| | | ‣ "C:\inetpub\wwwroot\glpi_mkt/files/_tmp" ("GLPI_TMP_DIR") |
| | | ‣ "C:\inetpub\wwwroot\glpi_mkt/files/_uploads" ("GLPI_UPLOAD_DIR") |
| | | You can ignore this suggestion if your web server root directory is "C:\inetpub\wwwroot\glpi_mkt\public". |
| [SECURITY] Security configuration for sessions | [SKIPPED] | |
| Ensure security is enforced on session cookies. | | |
| [SUGGESTED] PHP maximal integer size | [OK] | |
| Support of 64 bits integers is required for IP | | |
| addresses related operations (network inventory, | | |
| API clients IP filtering, ...). | | |
| [SUGGESTED] exif extension | [OK] | |
| Enhance security on images validation. | | |
| [SUGGESTED] ldap extension | [OK] | |
| Enable usage of authentication through remote LDAP | | |
| server. | | |
| [SUGGESTED] openssl extension | [OK] | |
| Enable email sending using SSL/TLS. | | |
| [SUGGESTED] PHP extensions for marketplace | [OK] | |
| Enable support of most common packages formats in | | |
| marketplace. | | |
| [SUGGESTED] Zend OPcache extension | [OK] | |
| Enhance PHP engine performances. | | |
| [SUGGESTED] PHP emulated extensions | [OK] | |
| Slightly enhance performances. | | |
| [SUGGESTED] Permissions for marketplace directory | [OK] | |
| Enable installation of plugins from marketplace. | | |
| [SUGGESTED] DB timezone data | [OK] | |
| Enable usage of timezones. | | |
+-----------------------------------------------------+------------+-----------------------------------------------------------------------------------------------------------+Offline
#5 2024-05-30 13:32:27
- Vicken
- Member
- Registered: 2024-03-04
- Posts: 22
Re: Problem with permissions, but where?
Hi all,
I got the problem fixed temporarly by assigning read/write permissions on the new doc-directory for everyone. I'll try to figure out the exact permissions needed for functionality as I don't quite like using the everyone group.
Offline
Pages: 1