Boost - Permission denied creating PHP session

Post support questions that directly relate to Linux/Unix operating systems.

Moderators: Developers, Moderators

Post Reply
MarcoT
Posts: 1
Joined: Fri May 09, 2014 9:21 am

Boost - Permission denied creating PHP session

Post by MarcoT »

Hi guys,
hope somebody could help me out with this weird issue.
I have boost installed, active and running quite well.
I frequently see the following messages in the boost log:

Code: Select all

2014:05:09 16:24:10 - Host Connected '127.0.0.1'
2014:05:09 16:24:10 - Host Validated '127.0.0.1'
2014:05:09 16:24:10 - Host Disconnect Request Received. '127.0.0.1'
2014:05:09 16:24:10 - RRD Command 'update /usr/share/cacti/rra/bios-ldap01_utenze_bankit_it_hdd_used_279.rrd --template hdd_total:hdd_used  1399645203:4227530752:2108862464'
2014:05:09 16:24:10 - RRDUpdate OK Message: 'OK'
*** BEFORE: Current script owner: root
PHP Warning:  session_start(): open(/var/lib/php/session/sess_ifgmt34ucr84c3kb6278kfqpf3, O_RDWR) failed: Permission denied (13) in /usr/share/cacti/include/global.php on line 156
*** AFTER : Current script owner: root
They seem to be related to the "On Demand RRD Updating" feature.
Basically when I click on a graph and it get updated "on demand" session_start() fails writing in /var/lib/php/session/ because of missing permissions. Here comes the weird stuff:
- /var/lib/php/session/ has permissions root:apache(770). I have double checked the cacti user and the apache user can successfully write, this is proven by the session files found with cacti and apache as owner
- SELinux is disabled
- I have add the two log lines with *** making the global.php writing the user trying to write the new session file and ... it turns out be root!
- If I change the directory mode to 777 the error goes away
- boost is running as cacti user
- the pollers are running as cacti user

When the boost_poller calls the update the user is "cacti" instead of "root" and the only rows displayed in the logs are:

Code: Select all

*** BEFORE: Current script owner: cacti
*** AFTER : Current script owner: cacti
so, I guess everything is working as expected in this case.

Cheers,
Marco
Post Reply

Who is online

Users browsing this forum: No registered users and 0 guests