New server gets a + on one option. Points new site to default and won't let Apache2 start up

Virtualmin
1
SYSTEM INFORMATION
OS type and version REQUIRED
Webmin version REQUIRED
Virtualmin version REQUIRED
Webserver version REQUIRED
Related packages SUGGESTED

Every time I create a new virtual server on my system a + gets put in front of ExecCGI and not only does it cause the server initially to go to the default from a browser, if you restart apache it fails because you can have no signed options or all of them have to be signed. How can I stop this behavior?

2

I typed all of my system info after each line but is doesn’t look like those came through. If anyone needs them I can certainly re-provide them but not sure if they are hidden on purpose.

3

You could copy / paste the system info, no need to key it in. Copy is done via the icon on the top right corner of the dashboard.

4

THank you!

SYSTEM INFORMATION
OS type and version Ubuntu Linux 22.04.5
Usermin version 2.102
Virtualmin version 7.30.4 Pro
Theme version 21.20.7
Apache version 2.4.52
Package updates 56 package updates are available
5

I don’t know how you got that behavior. The default Server Template for Apache doesn’t include a + before ExecCGI.

But, Server Templates is where you should look first.

screenshot of Server Templates->Default->Website for domain
screenshot of Server Templates->Default->Website for domain1263×1086 173 KB

6

Everything on my system looks exactly like your screenshot. The ExecCGI line is not configured in the Directives and Settings for New Websites at all. I don’t know where it is coming from but I would like to hammer this until I find it. It happens EVERY time I create a new website and although unfortunately that isn’t that often, every single time I have to go 80% of the way through finding what is causing the problem to fix it and it is becoming much more of a burden than finally fixing it. I’m hoping someone can nail this down for me cause I"m at a total loss so far.

7

You can see it on line 13 of the newly created website.

image
image918×707 113 KB

This is what I have in Directives and Settings for new websites:

ServerName ${DOM}
ServerAlias www.${DOM}
DocumentRoot ${HOME}/public_html
ErrorLog ${HOME}/logs/error_log
CustomLog ${HOME}/logs/access_log combined
ScriptAlias /cgi-bin/ ${HOME}/cgi-bin/
<Directory ${HOME}/public_html>
Options Indexes IncludesNOEXEC SymLinksifOwnerMatch
allow from all
AllowOverride All Options=ExecCGI,Includes,IncludesNOEXEC,Indexes,MultiViews,SymLinksIfOwnerMatch

<Directory ${HOME}/cgi-bin>
allow from all

8

Any thoughts on where I should look second? Thanks Joe. Been a while. =)

9

Check here, by that article apache2 have a file it takes defaults from. I don’t use apache2 so I’m not real familiar with its ways.

(How to configure Apache2 settings - Ubuntu Server documentation)

10

Thanks Stefan. I don’t think that file is being used. That option certainly isn’t in that file anyhow. The default domain that pops up when this happens is titled 0-32nds.com.conf and it has some instances of the +ExecCGI in its config file however, they are on lines with other options that are also signed. Does anyone know if there is a logfile created when a new virtual server is created that I might glean some info from?

11

There is the Webmin actions log (Webmin Actions Log | Webmin)

I doubt it would log with the level of detail that would reveal what’s happening here.

You could try just grepping for that string in /etc to see if something is explicitly configured to add it. I’m kinda stumped, as you’ve already looked at the place this would generally be configured in Virtualmin, and what you’re getting is not the default, so if Virtualmin is doing it, it’s something you configured at some point (though I’m stumped about where else you’d configure it).

To grep:

grep -R '+ExecCGI' /etc

When I do this, I find it in exactly one place, and it raises a question for you: Are you installing Bugzilla with Virtualmin into these domains?

12

No Bugzilla that I am aware of. The grep command results are below:

There are other occurrences on my system but all of those are on Options lines where ALL options presented are signed.

root@ns2:/home/administrator# grep -R ‘+ExecCGI’ /etc
/etc/webmin/virtual-server/latest-scripts/bugzilla.pl: “Options +ExecCGI”,
/etc/webmin/virtual-server/latest-scripts/bugzilla.pl: if (@opts) { $opts[0] .= " +ExecCGI"; }
/etc/webmin/virtual-server/latest-scripts/bugzilla.pl: else { @opts = ( “+ExecCGI” ); }
grep: /etc/systemd/system/multi-user.target.wants/snapd.aa-prompt-listener.service: No such file or directory
grep: /etc/alternatives/php-fpm.sock: No such device or address
/etc/apache2/sites-available/realrockterbrock.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-available/realrockterbrock.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-available/ba6a.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-available/ba6a.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-available/daveobieone.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-available/daveobieone.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-available/1570wtrb.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-available/1570wtrb.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-available/ampliphase.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-available/kymoradio.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-available/kymoradio.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-available/kymoradio.com.conf: Options +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-available/thetitter.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-available/thetitter.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-available/beattie.family.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-available/beattie.family.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-available/spheresofchaos.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-available/spheresofchaos.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-available/0-32nds.com.conf: Options +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-available/0-32nds.com.conf: Options +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/conf-enabled/serve-cgi-bin.conf: Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
/etc/apache2/conf-available/php8.1-cgi.conf:# Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
/etc/apache2/conf-available/serve-cgi-bin.conf: Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
/etc/apache2/sites-enabled/realrockterbrock.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-enabled/realrockterbrock.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-enabled/ba6a.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-enabled/ba6a.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-enabled/daveobieone.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-enabled/daveobieone.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-enabled/1570wtrb.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-enabled/1570wtrb.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-enabled/ampliphase.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-enabled/kymoradio.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-enabled/kymoradio.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-enabled/kymoradio.com.conf: Options +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-enabled/thetitter.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-enabled/thetitter.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-enabled/beattie.family.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-enabled/beattie.family.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-enabled/spheresofchaos.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-enabled/spheresofchaos.com.conf: Options +Indexes +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-enabled/0-32nds.com.conf: Options +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI
/etc/apache2/sites-enabled/0-32nds.com.conf: Options +IncludesNOEXEC +SymLinksifOwnerMatch +ExecCGI