symbolic link permissions error after clicking "Fix Issue"

yan · January 9, 2013, 7:22pm

Hi !
I’ve started getting an error screen on the VM system status page, two of them actually :

the first says there’s a symbolic link permissions error that could affect security, accompanied by a “fix” button with warning
the second says “Your system is using a self-signed SSL certificate that is only 512 bits long, which is smaller than the recommended size of 2048 bits. It should be immediately re-generated”

I clicked “Fix Issue” for the symbolic link. Now I tried to access my site and I get the error “500 internal server error”

I’m on a :
Operating system Ubuntu Linux 10.04.2
Webmin version 1.610
Virtualmin version 3.97.gp

Maybe the “$HOME/logs/error_log” could help you to help me


/home/adminpmp/public_html/functionsc.php on line 787, referer: http://www.*.com/index.php

[Wed Jan 09 16:59:21 2013] [warn] [client ...] mod_fcgid: stderr: PHP Warning:  imagettftext(): Could not find/open font in
/home/adminpmp/public_html/functionsc.php on line 788, referer: http://www.**.com/index.php

[Wed Jan 09 17:54:47 2013] [error] [client ...] File does not exist: /home/adminpmp/public_html/styles_gal_ie7.css, referer:
http://www.**.com/

[Wed Jan 09 17:56:37 2013] [error] [client ...] File does not exist: /home/adminpmp/public_html/styles_gal_ie7.css, referer:
http://www.**.com/index.php

[Wed Jan 09 17:57:32 2013] [warn] [client ...] mod_fcgid: stderr: PHP Warning:  imagettftext(): Could not find/open font in
/home/adminpmp/public_html/functionsc.php on line 787, referer: http://www.**.com/index.php

[Wed Jan 09 17:57:32 2013] [warn] [client ...] mod_fcgid: stderr: PHP Warning:  imagettftext(): Could not find/open font in
/home/adminpmp/public_html/functionsc.php on line 788, referer: http://www..com/index.php

[Wed Jan 09 18:13:47 2013] [error] [client ...] File does not exist: /home/adminpmp/public_html/client/plugins/tinymce/plugins/imagemanager,
referer: http://.com/admin/produit_modifier.php?ref=000014684&rubrique=2

[Wed Jan 09 18:13:47 2013] [error] [client ...] File does not exist: /home/adminpmp/public_html/client/plugins/tinymce/plugins/filemanager,
referer: http://.com/admin/produit_modifier.php?ref=000014684&rubrique=2

[Wed Jan 09 18:15:48 2013] [error] [client ...] File does not exist: /home/adminpmp/public_html/admin/phpmyadmin

[Wed Jan 09 18:15:48 2013] [error] [client ...**] File does not exist: /home/adminpmp/public_html/admin/styles_pages.css, referer:
http://.com/admin/phpmyadmin

[Wed Jan 09 18:15:48 2013] [error] [client ...] File does not exist: /home/adminpmp/public_html/admin/styles_gal.css, referer:
http://.com/admin/phpmyadmin

[Wed Jan 09 18:15:48 2013] [error] [client ...] File does not exist: /home/adminpmp/public_html/admin/img, referer:
http://.com/admin/phpmyadmin

[Wed Jan 09 18:16:15 2013] [error] [client ...] File does not exist: /home/adminpmp/public_html/admin/phpmyadmin

[Wed Jan 09 18:16:16 2013] [error] [client ...**] File does not exist: /home/adminpmp/public_html/admin/styles_pages.css, referer:
http://.com/admin/phpmyadmin

[Wed Jan 09 18:16:16 2013] [error] [client ...] File does not exist: /home/adminpmp/public_html/admin/styles_gal.css, referer:
http://.com/admin/phpmyadmin

[Wed Jan 09 18:16:16 2013] [error] [client ...] File does not exist: /home/adminpmp/public_html/admin/img, referer:
http://.com/admin/phpmyadmin

[Wed Jan 09 18:21:16 2013] [alert] [client ...] /home/adminpmp/public_html/.htaccess: Option FollowSymlinks not allowed here, referer:
http://.com/

[Wed Jan 09 18:21:19 2013] [alert] [client ...] /home/adminpmp/public_html/.htaccess: Option FollowSymlinks not allowed here
http://.com/

[Wed Jan 09 19:11:20 2013] [alert] [client ...] /home/adminpmp/public_html/.htaccess: Option FollowSymlinks not allowed here, referer:
http://www..com/

[Wed Jan 09 19:11:20 2013] [alert] [client ...] /home/adminpmp/public_html/.htaccess: Option FollowSymlinks not allowed here, referer:
http://www..com/

[Wed Jan 09 19:11:20 2013] [alert] [client ...] /home/adminpmp/public_html/.htaccess: Option FollowSymlinks not allowed here, referer:
http://www..com/

[Wed Jan 09 19:11:20 2013] [alert] [client ...] /home/adminpmp/public_html/.htaccess: Option FollowSymlinks not allowed here, referer:
http://.com/

[Wed Jan 09 19:11:20 2013] [alert] [client ...] /home/adminpmp/public_html/.htaccess: Option FollowSymlinks not allowed here, referer:
http://www..com/

[Wed Jan 09 19:11:21 2013] [alert] [client ...] /home/adminpmp/public_html/.htaccess: Option FollowSymlinks not allowed here

[Wed Jan 09 19:11:21 2013] [alert] [client ...] /home/adminpmp/public_html/.htaccess: Option FollowSymlinks not allowed here

[Wed Jan 09 19:11:21 2013] [alert] [client ...] /home/adminpmp/public_html/.htaccess: Option FollowSymlinks not allowed here

[Wed Jan 09 19:11:21 2013] [alert] [client ...] /home/adminpmp/public_html/.htaccess: Option FollowSymlinks not allowed here

[Wed Jan 09 19:11:21 2013] [alert] [client ...] /home/adminpmp/public_html/.htaccess: Option FollowSymlinks not allowed here

[Wed Jan 09 19:11:21 2013] [alert] [client ...**] /home/adminpmp/public_html/.htaccess: Option FollowSymlinks not allowed here, referer:
http://www..com/

[Wed Jan 09 19:11:21 2013] [alert] [client ...] /home/adminpmp/public_html/.htaccess: Option FollowSymlinks not allowed here

[Wed Jan 09 19:11:21 2013] [alert] [client ...] /home/adminpmp/public_html/.htaccess: Option FollowSymlinks not allowed here

[Wed Jan 09 19:11:21 2013] [alert] [client ...**] /home/adminpmp/public_html/.htaccess: Option FollowSymlinks not allowed here, referer:
http://www..com/

[Wed Jan 09 19:11:21 2013] [alert] [client ...] /home/adminpmp/public_html/.htaccess: Option FollowSymlinks not allowed here, referer:
http://.com/admin/

[Wed Jan 09 19:11:21 2013] [alert] [client ...] /home/adminpmp/public_html/.htaccess: Option FollowSymlinks not allowed here, referer:
http://******.com/
%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%
20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20admin/

[Wed Jan 09 19:11:21 2013] [alert] [client ...**] /home/adminpmp/public_html/.htaccess: Option FollowSymlinks not allowed here, referer:
http://.com/admin/

[Wed Jan 09 19:11:21 2013] [alert] [client ...] /home/adminpmp/public_html/.htaccess: Option FollowSymlinks not allowed here

Thanks in advance

Yan

Eric · January 9, 2013, 7:41pm

Howdy,

It looks like you may just need to edit “/home/adminpmp/public_html/.htaccess”, and change the parameter “FollowSymlinks” to instead read “SymlinksIfOwnerMatches”.

-Eric

yan · January 9, 2013, 10:03pm

Wow, thank you very much,
So stupid issue !

I just don’t understand why it works with :

Options +SymLinksIfOwnerMatch

but it seems to fail with :

Options +SymlinksIfOwnerMatches

nevermind, i’m glad it works.

Eric · January 9, 2013, 10:19pm

Nuts, that’s just a typo on my part… it should indeed be “SymLinksIfOwnerMatch”.

I’m glad you got it working!

-Eric

yan · January 10, 2013, 11:28am

Well, thanks andreychek.

I 'll then try to fix the second issue, that’s to say : "“Your system is using a self-signed SSL certificate that is only 512 bits long, which is smaller than the recommended size of 2048 bits. It should be immediately re-generated”

So i went to : Webmin -> Webmin Configuration -> SSL Encryption -> Self-signed Certificate

i created the new certificate with a 2048 RSA Key and now… my website didn’t respond (error 118 (net::ERR_CONNECTION_TIMED_OUT))

Any idea on how to fix that ?

Eric · January 10, 2013, 3:04pm

It’s a lot simpler to create SSL certificates using Virtualmin, rather than Webmin.

You can do that by selecting a domain that has SSL enabled, and then go into Server Configuration -> Manage SSL Certificates.

From there, you can go into the “Self-Signed Certificate” tab, and create a new certificate.

Once it’s created, you can click the “Copy to Webmin” button to replace your Webmin SSL certificate with the new one.

-Eric

yan · January 10, 2013, 4:17pm

My saviour, thank you !

It partly works because now i can access my domain trough

https://

but not through

http://

and If I disable SSL I can’t access none of them.

At first, i think that SSL was disabled for this domain.

My goal was just to fix the webmin warning and continue accessing the domain by http:// without using SSL except for accessing webmin interface.

yan · January 10, 2013, 5:05pm

Edit : sorry 'bout my last question, I try accessing my site from another network and all is perfect. Maybe a cache issue.

Problem solve !