Menu

Permission issue on CentOS 7

JohnCon
2014-09-11
2021-09-27
  • JohnCon

    JohnCon - 2014-09-11

    Getting errors when trying to run the setup wizard:

    iTop needs the directory '/var/www/html/itop/log' to be writable. The directory '/var/www/html/itop/log' does not exist and '/var/www/html/itop/' is not writable, the application cannot create the directory 'log' inside it.

    I've tried setting /var/www/html/itop to mode 777, also tried changing user and group ownership to the apache user as well.

    Any idea why this is still an issue?

     
  • TheBigOne

    TheBigOne - 2014-09-12

    Hi,

    is SELinux enabled? what about the permissions on /var , /var/www, /var/www/html ?
    change to user apache and try to create the directory by hand, you will see where you stuck.

     
  • JohnCon

    JohnCon - 2014-09-12

    Thanks, that did it!

     
  • metafaniel

    metafaniel - 2015-04-20

    If you want to test if SELinux it's the root of this problem, use the following command to diable it temporarily, then refresh the iTop Setup to see if the message has changed.

    sudo setenforce 0
    

    If iTop has no problem now, then yes SeLinux it's blocking the setup. If you need SELinux enabled, try the following:

    # enable SELinux again
    sudo setenforce 1
    # Set permissions to the required folder as follows:
    sudo semanage fcontext -a -t public_content_rw_t '/var/www(/.*)?'
    sudo restorecon -R /var/www
    sudo setsebool -P allow_smbd_anon_write 1
    

    I wish this is helpful for you as it was for me.

     
    • Besmir Zanaj

      Besmir Zanaj - 2017-08-02
      # enable SELinux again
      sudo setenforce 1
      # Set permissions to the required folder as follows:
      # Install semanage first
      sudo yum install policycoreutils-python
      sudo semanage fcontext -a -t public_content_rw_t '/var/www(/.*)?'
      # you might need to run the command twice ^
      sudo restorecon -R /var/www
      sudo setsebool -P allow_smbd_anon_write 1
      

      Even after following the tutorial it didn't work on CentOS 7
      had to setenforce 0 to make it work

       
  • andrewm659

    andrewm659 - 2016-08-29

    So I just tried this and it didn't work for me. I'm still getting permission issues on writing to the fodlers I was told to create upon install. Why are we chanign gthe context to public and not to the httpd context?

     
  • N S

    N S - 2016-08-29

    chown apache:apache /var/www/<root folder="" url="">/*

    that gices apache and the apache group ownership of the files and folders in there. you may have to create the extra folders yourself and then run that command again.

     
  • andrewm659

    andrewm659 - 2016-08-29

    Nope didn't work.

     
  • N S

    N S - 2016-08-29

    which exact issue are you getting?

     
  • andrewm659

    andrewm659 - 2016-08-29

    iTop Installation Wizard
    Prerequisites validation: 4 Error(s), 0 Warning(s).

    The directory '/var/www/html/itop/log' exists but is not writable for the application.

    The directory '/var/www/html/itop/env-production' exists but is not writable for the application.

    The directory '/var/www/html/itop/conf' exists but is not writable for the application.

    The directory '/var/www/html/itop/data' exists but is not writable for the application.

     
    • N S

      N S - 2016-08-29

      Do:

      chown apache:apache /var/www/html/*

      to make apache own the folders. post output of: (LL)
      ll /var/www/html/

       
  • andrewm659

    andrewm659 - 2016-08-29

    [root@asm-web001 html]# ls -la
    total 12
    drwxr-xr-x. 3 apache apache 4096 Aug 25 19:34 .
    drwxr-xr-x. 4 root root 4096 Aug 24 17:33 ..
    drwxrwxrwx. 23 apache apache 4096 Aug 25 19:35 itop
    [root@asm-web001 html]# ls -Z
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 itop
    [root@asm-web001 html]#

    [root@asm-web001 itop]# ls -la
    total 1488
    drwxrwxrwx. 23 apache apache 4096 Aug 25 19:35 .
    drwxr-xr-x. 3 apache apache 4096 Aug 25 19:34 ..
    drwxrwxrwx. 3 apache apache 4096 Aug 25 19:34 addons
    drwxrwxrwx. 3 apache apache 4096 Aug 25 19:34 application
    -rwxrwxrwx. 1 apache apache 245 Aug 25 19:34 approot.inc.php
    drwxrwxrwx. 2 apache apache 4096 Aug 25 19:35 conf
    drwxrwxrwx. 3 apache apache 4096 Aug 25 19:34 core
    drwxrwxrwx. 4 apache apache 4096 Aug 25 19:34 css
    drwxrwxrwx. 2 apache apache 4096 Aug 25 19:34 data
    drwxrwxrwx. 4 apache apache 4096 Aug 25 19:34 datamodels
    drwxrwxrwx. 2 apache apache 4096 Aug 25 19:34 dictionaries
    drwxrwxrwx. 2 apache apache 4096 Aug 25 19:34 documentation
    drwxrwxrwx. 2 apache apache 4096 Aug 25 19:35 env-production
    drwxrwxrwx. 2 apache apache 4096 Aug 25 19:34 extensions
    drwxrwxrwx. 4 apache apache 4096 Aug 25 19:34 images
    -rwxrwxrwx. 1 apache apache 1030 Aug 25 19:34 index.php
    drwxrwxrwx. 5 apache apache 4096 Aug 25 19:34 js
    drwxrwxrwx. 7 apache apache 4096 Aug 25 19:34 lib
    drwxrwxrwx. 2 apache apache 4096 Aug 26 13:00 log
    -rwxrwxrwx. 1 apache apache 1414967 Aug 25 19:34 manifest.xml
    drwxrwxrwx. 3 apache apache 4096 Aug 25 19:34 pages
    drwxrwxrwx. 3 apache apache 4096 Aug 25 19:34 portal
    drwxrwxrwx. 4 apache apache 4096 Aug 25 19:34 setup
    drwxrwxrwx. 4 apache apache 4096 Aug 25 19:34 sources
    drwxrwxrwx. 2 apache apache 4096 Aug 25 19:34 synchro
    -rwxrwxrwx. 1 apache apache 630 Aug 25 19:34 web.config
    drwxrwxrwx. 2 apache apache 4096 Aug 25 19:34 webservices
    [root@asm-web001 itop]#

    [root@asm-web001 itop]# ls -Z
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 addons
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 application
    -rwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 approot.inc.php
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 conf
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 core
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 css
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 data
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 datamodels
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 dictionaries
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 documentation
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 env-production
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 extensions
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 images
    -rwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 index.php
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 js
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 lib
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 log
    -rwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 manifest.xml
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 pages
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 portal
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 setup
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 sources
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 synchro
    -rwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 web.config
    drwxrwxrwx. apache apache unconfined_u:object_r:public_content_rw_t:s0 webservices
    [root@asm-web001 itop]#

     
  • N S

    N S - 2016-08-29

    Do a restart of httpd and try again.

    Your issue should have been sorted based on the above output

     
  • andrewm659

    andrewm659 - 2016-08-29

    I always do that after I change things...might reboot

     
  • N S

    N S - 2016-08-29

    is your webservice apache, apache2 or httpd?

    Also is the user group in the httpd.conf set to apache?

     
  • andrewm659

    andrewm659 - 2016-08-29

    Sorry, running CentOS 7.1 so its httpd.

    Not sure on httpd.

     
  • andrewm659

    andrewm659 - 2016-08-29

    User apache
    Group apache

     
  • andrewm659

    andrewm659 - 2016-08-29

    No go on the reboot.

     
  • N S

    N S - 2016-08-29

    have you done any server hardening prior to installation?

    try chmod 777 /var/www/html/*

    chmod 777 /var/www/html/itop/*

    i am out of solutions, you may want to do a fresh install.

     
  • Nguyen Truong Giang

    Dear all,
    I installed iTop on CentOS 7, but there have some errors,.
    Please help me fix this isssue.
    Thank you!

     
    • Pierre Goiffon

      Pierre Goiffon - 2021-09-27

      Hello,
      Please don't post new questions in existing threads ! Prefer create new threads ("create topic" link on top left)
      The error messages says it all. i f you need help about configuring your server's file system permissions, then you should ask the question in another forum dedicated to the OS it's using : those forums are about iTop only.

       

Log in to post a comment.