Mambo change ownerchip-permission when installing...

[blygen]

Hi,

I have installed Mambo 4.5.2, when I installed themplates and ako-book the files and catalog get this permission:
drwxr-xr-x 3 www www 4096 Feb 22 20:03 com_akobook/

I have tried the chown commando too change the ownerchip, but get this anser:
chown: changing ownership of ******/com_akobook': Operation not permitted

I can`t erase this.

I want to fixs the installer so it set the right permission.
When I used 4.5.1 this is not a problem!

Can someone help me?

mvh
BLygen
www.blygen.net

[Keane]

I got a similar problem. For some reason, the new 4.5.2 Mambo changes the onwer of newly installed component/mambot directories to userid "nobody". After that I cannot edit, alter or CHMOD any files in that particular installed directory.

I am convinced many others will have this problem but haven't seen it yet because it will only be apparant with new installs in 4.5.2. Just try to change new components, mambots or modules by FTP that were installed AFTER your 4.5.2 upgrade.

Only mambo can handle those directories and files now which is a BAD idea. I want to change files, perhaps patch and update through FTP and this is not possible anymore with fresh 4.5.2 component/bot/module installs.

Error message when trying to change the file/dir:
Request denied. Verify that the file or folder exists and that you have the necessary permissions on the server to perform this operation.

Up to 4.5.1b everything was fine. I sure hope someone can help me and others out cause this one has a high negative impact on my work with Mambo (as a hobby).

[Keane]

Ok, I got some answers. Basically, the combination of safe mode and the mambo install scripts on apache PHP changes the ownership to the apache process id usually called wwwrun, nobody and other inspirational names.

Unless, like me, there is no safe mode applied and you still have the same problems. My apache process user id owns my files and directories and I cannot edit my files and directories anymore.

Solution of my offshored hoster: get dedicated hosting. Uhuh. Always looking for new business in problems

Anyway, my apache process id is like the government of a Banana republic. Suddenly it owns my house regardless I paid for it. This is suckurity

[Keane]

I'd like to add that indeed CHMODding all files and directories 0777 through the configuration solves part of the problem of not being able to edit the files. Unfortunately, in my case, once the installed directories are 0777 I cannot CHMOD them to anything else anymore (no permission). And this is not safe. So please check your directory setting next to kochp's advice after upload.

[blygen]

Things get better i can no erase and change folders and files, but I cannot change the permission.
Like Keane wrote, the security is a problem when I cannot CHMOD them.

[ot2sen]

Just noticed this issue today too

Fresh install of Mambo 4.5.2 (fantastico), and then wanted to add some extra css-file to the Display Menu module. Not !
Only Mambo is allowed to do anything with the files. Ended up with doing a delete module inside mambo, and included the css-file in the original module-zip, and then installed the module again.

There have to be a better aproach to this !
This is really a downside in the new 4.5.2, when you have no ftp rights after installing. Haven´t tried the manual installation, where there´s some options to set rights in the install process, but that option you don´t have in a fantastico installation.

Hope some of the developers can give a clue how to solve this issue.

Have to say that apart from this Mambo 4.5.2 rocks

[Keane]

Originally Posted by Keane

I'd like to add that indeed CHMODding all files and directories 0777 through the configuration solves part of the problem of not being able to edit the files. Unfortunately, in my case, once the installed directories are 0777 I cannot CHMOD them to anything else anymore (no permission). And this is not safe. So please check your directory setting next to kochp's advice after upload.

Why did Kochp remove his reference and posts? His info not good in hindsight? Weird, simply removing your posts when someone replies to you and certainly not very helpful to the community.

[aravot]

Originally Posted by blygen

Things get better i can no erase and change folders and files, but I cannot change the permission.
Like Keane wrote, the security is a problem when I cannot CHMOD them.

I have the same problem fresh install of 4.5.2, now can not delete or change permission through ftp program, this glitch needs to be fixed or at least provide a work around.

[ot2sen]

Did a lot of testing yesterday, and this "permission thing" is really stopping the smooth Mambo machine from running perfectly.

New 4.5.2 Mambo installation :
Did a fresh install of 4.5.2 (through fantastico), afterwards manually had no problem with uploading/overwriting the 4.5.2.1 files with use of ftp.
Installed a module within Mambo then, and needed to ad a special css-file for that module with use of ftp. Not allowed to overwrite the file already there.

Upgraded 4.5.1 to 4.5.2 at another installation:
Same issue as with a fresh Mambo 4.5.2 installation. No ftp rights to modules/components that have been handled by Mambo.

Test on 4.5.1a with same modules
Uploaded the same module on a working 4.5.1a Mambo setup from within Mambo. Connected through ftp - and had no problem to ad the extra css-file that I wanted to.

This is an issue in the new 4.5.2 Mambo, and is really causing problems

[Keane]

Hi,

I figured out a workaround with which you can reclaim the ownership from your apache process id. Basically, you can alter, upgrade and CHMOD your files and directories again without the need of pre-CHMODing them all to the unsafe 0777 mode. But like Ot2sen put it: the smoothness of installation process is evaporated.

It will probably not be possible anymore to have Mambo de-install the component/module/mambot/template after this. You must do this manually...

Suppose you want to install a component, mambot, module or template and you, poor guy or gal, only have a shared webhosting with FTP access and no shell access.

0. First backup ALL your files of your site, or the ones that you consider essential to backup.

1. Install MamboXplorer made by Soeren Eberhardt. This is an easy to use file browser that can delete (and many more) all your apache process owned files and directories (wwwrun, nobody). It works properly with Mambo 4.5.2.1 and lower.

2. Install your new
a) component
b) module
c) mambot
d) template

3.
a) component: now FTP to your site and copy the directories /administrator/components/com_[the name of your newly installed component] and /components/com_[the name of your newly installed component] to your hard drive.

b) module: FTP to your site and copy the file modules/mod_the name of your newly installed module].php and modules/mod_the name of your newly installed module].xml to your hard drive. Or just copy your complete /modules directory for simplicity.

c) mambot: Copy the complete /mambots directory to your hard drive.

d) templates: Copy the content of your directory /templates/[new template name] to your hard drive.

4. In your admin section, go to components, mamboXplorer and

a) components: delete the directories /administrator/components/com_[the name of your newly installed component] and /components/com_[the name of your newly installed component]. After deletion, copy (with FTP!!, not mamboXplorer) the same directories back from your hard drive at exactly the same place. Note: this can be tricky cause the component directory names of /components and administrator/components are the same.

b) modules: delete the files modules/mod_the name of your newly installed module].php and modules/mod_the name of your newly installed module].xml with MamboXplorer. Now FTP the same files back.

c) mambot: delete the files that you don't own with MamboXplorer. You can see who owns the file/dir in most FTP clients. Now FTP them back with the files/dirs stored on your hard drive.

d) templates: delete the directory /templates/[new template name] with MamboXplorer. Now FTP that same directory back from your hard drive to the same location on your server.


Then again, you own your files. Important when you want to hack, update or upgrade your files in the future so do the above procedure right away and don't wait with it.

Hope this helps. Feedback appreciated.