Hello,
I'm working on setting a up a new Virtualmin server and running into some trouble with user configuration. I'm running the latest Virtualmin GPL on Centos 5.5 x86_64. All my Virtualmin and OS packages are up to date.
I'm trying to set up a new Webmin user limited to the following capabilities:
I've set up a new Webmin user and given the user access only to the "Virtualmin Virtual Servers (GPL)" module. Then, within the Module Access Control settings, I have all options set to "Yes" except for "Can edit module configuration?", which is set to "No". I am able to log in to Webmin/Virtualmin with my new user, but when I go to create a new virtual server, the "Account plan" drop-down menu is empty. If I click on "Create server" anyway, I get the following error message:
Failed to create virtual server : Selected plan does not exist or is not available
If I go back into the Module Access Control settings for the user and set "Can edit module configuration?" to "Yes", things work correctly. However, this gives the user all kinds of additional capabilities that they shouldn't have.
I'm guessing this is some sort of permissions issue, but I have been unable to find any similar issues on the forums or in the bug tracker. I'd appreciate a nudge in the right direction.
Thanks, Steve
bump
bump too
It's not recommended to create Webmin users "behind Virtualmin's back" and then expect Virtualmin to play nice with them. :) Neither is it recommended to edit Virtualmin's Webmin users directly, except you know very well what you're doing.
What exactly are you trying to achieve with creating a new Webmin user with the mentioned rights? What's your exact plans? You should rather be creating Virtualmin servers (and hence users) and/or "extra admins" if applicable.
what i plan to do is allow people in my team to manage sites, without giving them enough rights to change account plans settings or other internal parameters.
What about using the "Extra Admins" feature then? That will create users under Virtualmin control, and you can give them specific access rights too.
It seems that extra admins are restricted to their specific sites. What I am looking for is a way to have coworkers able to create new Virtual servers, based on templates and accounts plans that I created.
Okay, I guess the Virtualmin module does not have the kind of access rights granularity you'd need there right now. It's either "root user with full access" or "Virtual server admin without access to changing the plan".
Sorry, can't help there. One of the developers will have to look into that.
Until then, wouldn't it suffice to tell your co-workers not to fiddle with the account plans, "or else!"? I mean, with the level of access you're giving them, they could do much worse things than messing with the plans.
In fact, I don't fear that they voluntarily do bad things, but simple "errors". For example, if they click "Save and apply" in "Account plans", all the customized quotas will be overwritten, and I fear it will be really annoying to fix...
Well, a simple regular backup copy of the
/etc/webmindirectory, which holds all the Virtualmin configuration, will help in such cases. And you need that anyway, in case of hard drive failure. :)Using e.g. "rsnapshot", you can even make regular snapshots of the config directories (in form of hardlinks, thus very space-efficient), and easily revert parts of it to multiple former states if anything bad happens.
I personally include the complete Virtualmin configuration in my daily domain backup.
So it's already in my incremental backups... I didn't think about it.
Thank you.
Anyway, I still feel there is a feature missing here ;)
It should be, yep. Note though that the Virtualmin config (of Virtualmin itself, not the domains) is only added to the backup when you turn that on, and it is off by default.
In fact I use rdiff-backup to backup the whole filesystem, so I assume I do not need Virtualmin's backup feature, right ?
That's right, if you backup the whole filesystem, the files in question are naturally a part of the backup. :)