Correct way to prevent virtual server owners from creating sub- / alias-servers?

SYSTEM INFORMATION
OS type and version Ubuntu Linux 24.04.3
Webmin version 2.520
Usermin version 2.420
Virtualmin version 7.50.0 Professional
Theme version 25.20
Apache version 2.4.58
Package updates All installed packages are up to date

I’m trying to find a way to globally prevent virtual server owners from creating sub- or alias-servers, but still allowing the system admin creating those.

I can disable the creation per owner individually by going here:

I can’t find the same option from server templates or account plans. In account plans there used to be options for preventing server creation in allowed capabilites (based on my googling), but those options don’t exist anymore:

I’m probably missing something obvious here?

with the settings as you have set in account plans when I login as a domain owner I see

as you can see there is no option to create sub domains or alias domains, have you changed anything from the stock settings ?

Yes, for that one server owner, but I have about 50 of them and I don’t feel like setting their permissions one by one. That’s why I asked, if there’s a global option to prevent any virtual server owner (present or new) from creating sub- and alias-servers on their own.

I didn’t set them individually I just used the default virtualmin settings and all created servers follow that rule

Wait, how did you set that into account plans since there is no option “Cannot create” for Maximum allowed sub-servers and aliases? Or at least I don’t have that option there as shown in my screenshots.

I can confirm that no sub- or alias- for server admins and i definitely have not run cli code

This is all I have set


Note I have Automatic set you have chosen features

Ah, ok, so “Limit amount of virtual servers” set to “0” is same as setting “Cannot create” when editing owner limits.

The wording on that setting could be a bit better :smiley: Thanks! I’ll try that.

Just to confirm, these settings did the trick. Now virtual server admins cannot create anything on their own :slight_smile:

I still think those settings could be a bit better labeled. They give the impression that setting those to zero will prevent everyone (including root) adding more than 0 servers. It’s more clearer / better phrasing as it’s in the Edit Owner Limits -section.

Yeah, those should be labeled similar to how they appear in the owner limits page, it’s confusing to use different terminology for the same thing.

But, also, there is no such thing as a limit for the root user (or any root capable user). (I mean, Webmin ACLs can be used to make a root user not a root user, but no limit in Virtualmin applies to the root user.)

2 Likes

This topic was automatically closed 8 days after the last reply. New replies are no longer allowed.