Categories

  • English

    631 Topics
    2k Posts
    G
    @Promenade1037 said in i-doit update from 35 to 36 fails with permissions issues: Answering my own question, I reviewed /var/log/messages and found the following entry: "SELinux is preventing /usr/sbin/php-fpm from write access on the directory /var/www/html." Once I disabled SELinux, the update was able to proceed as usual. That is the worst you can do to fix this problem: turn off security. And worse: disable it and not even set it to permissive mode instead. If the SeLinux labels are not correct anymore, fix the SeLinux labels. Do not disable SeLinux. The installer as well as the instructions for the manual installation set the directory to a writable selinux context. So the first question to ask would be why the labels in your installation don't fit anymore?

  • Deutsch

    4k Topics
    16k Posts
    M
    Hi Folks, I have been handed over a runnig but undocumented i-doit 35 instance with working user auth against an AD system. But it creates ~2,5GB of logs per day in /var/www/html/log/ldap-yyyy-mm-dd.log eg: [2026-01-08 08:42:35] ldap.DEBUG: ->search: dn=CN=…filter=(objectclass=*) [2026-01-08 08:42:35] ldap.DEBUG: Found CN=… (Filter: (objectclass=*)): 1 [2026-01-08 08:42:35] ldap.DEBUG: -- Group pendant for "XXX" or "XXX" not found. Set an LDAP-Mapping in your corresponding person group if you want to use this as a right group. [2026-01-08 08:42:35] ldap.DEBUG: ->search: dn=CN=idoit_users,OU=i-doit, …filter=(objectclass=*) [2026-01-08 08:42:35] ldap.DEBUG: Found CN=idoit_users, … (Filter: (objectclass=*)): 1 [2026-01-08 08:42:35] ldap.DEBUG: -- Group pendant for "idoit_users" or "…" not found. Set an LDAP-Mapping in your corresponding person group if you want to use this as a right group. [2026-01-08 08:42:35] ldap.DEBUG: ->search: dn=CN…filter=(objectclass=*) Editing the connection to the AD - LDAP, "Connection-Test" "Debug-Level" is set to "low" (but i think this is just for the test). Running ubuntu 22.04 "/etc/php/8.3/fpm/conf.d/20-ldap.ini" has no additional entries. cronjob with find and rm is an ugly solution ;-}, if you know, what I mean. Any advises how to fix this? Kind Regards maniac