I never use default setup in my servers for security reasons, and so, when i change the default user of vu2000 to uv2000 and install isp-cp then i have the follow error.

Setting GUI Permissions: ..........................................................................................................................................
..........................................................................................................................................
..........................................................................................................................................
..........................................................................................................................................
..........................................................................................................................................
..................................................................................................................................done
Setting Engine Permissions: .chown: `root:vu2000': invalid group
...........done

And if i try to start apache2

Starting web server (apache2)...apache2: bad user name vu2000
failed!
invoke-rc.d: initscript apache2, action "start" failed.

So i change the user in sites-available/00_master.conf to uv2000 and apache2 works perfect.

But i dont know about the permission i have to change.

I use Debian Etch with a fresh install.

Sorry my bad english.

Thanks you guys for this great job.

This post was last modified: 02-27-2008 07:23 PM by BeNe.

Solved. I found the permission to change.

webhost:/var/www/ispcp/engine/setup# grep -R vu2000 *
set-engine-permissions.sh: echo -e "\tug+r,u+w,o-r root:vu2000 /etc/ispcp/ispcp.conf";
set-engine-permissions.sh:chown root:vu2000 /etc/ispcp/ispcp.conf

Security by obscurity?
well - I don't comment this.

So, you changed the APACHE_SUEXEC_USER_PREF to uv - and then the script did fail... - sound like a bug... right?
Maybe you could open a ticket?

/J

This post was last modified: 02-27-2008 12:26 AM by joximu.

I change the default user to avoid script kiddies.
Brute force and others scripts in the most of cases uses defaults parameters.
I prefer this way.

And, ok, i go open a ticket.

[]'s

For Scriptkiddies and BruteForce you can use fail2ban. I don't think this is a Bug. Is it possible to change the defaultuser in Confixx?

sure, if all hard code has been replaced

the problem is should be fixed now. Just use the latest trunk