Left pane of the File Manager not functioning

Question

Left pane of the File Manager not functioning

tahder opened this issue a year ago · comments

The left pane of the File Manager doesn't work (with big X) and displays an error message (see bottom right)

Based on the logs got related to authentic-theme on the file-manager library.

[01/Sep/2023:17:19:45 +1200] miniserv.pl started

[01/Sep/2023:17:19:45 +1200] Using MD5 module Digest::MD5

[01/Sep/2023:17:19:45 +1200] Using SHA512 module Crypt::SHA

[01/Sep/2023:17:19:45 +1200] PAM authentication enabled

[01/Sep/2023:17:19:46 +1200] Restarting

[01/Sep/2023:17:19:47 +1200] miniserv.pl started

[01/Sep/2023:17:19:47 +1200] Using MD5 module Digest::MD5

[01/Sep/2023:17:19:47 +1200] Using SHA512 module Crypt::SHA

[01/Sep/2023:17:19:47 +1200] PAM authentication enabled

Error: You are not allowed to access `/home/students/home/10000401/.usermin`. The only allowed directories are: `/home/students/home/10000401`. <sup class="ui_help" aria-label="/usr/libexec/usermin/authentic-theme/extensions/file-manager/file-manager-lib.pl (line 76)" data-tooltip><samp>?</samp></sup>

Error: You are not allowed to access `/home/students/home/10000401/.usermin/filemin`. The only allowed directories are: `/home/students/home/10000401`. <sup class="ui_help" aria-label="/usr/libexec/usermin/authentic-theme/extensions/file-manager/file-manager-lib.pl (line 76)" data-tooltip><samp>?</samp></sup>

Error: You are not allowed to access `/home/students/home/10000401/.usermin/mailbox`. The only allowed directories are: `/home/students/home/10000401`. <sup class="ui_help" aria-label="/usr/libexec/usermin/authentic-theme/extensions/file-manager/file-manager-lib.pl (line 76)" data-tooltip><samp>?</samp></sup>

[01/Sep/2023:17:20:48 +1200] Restarting

[01/Sep/2023:17:20:51 +1200] miniserv.pl started

[01/Sep/2023:17:20:51 +1200] Using MD5 module Digest::MD5

[01/Sep/2023:17:20:51 +1200] Using SHA512 module Crypt::SHA

[01/Sep/2023:17:20:51 +1200] PAM authentication enabled

Using the 'Frame Theme' got no displays of errors. However, the user much prefer the default theme (Authentic themee). as they accustomed to it and no idea what really cause it perhaps when upgrading the usermin/webmin as currently using the 2.002 version.

tahder · Answer 1 · Sat Sep 02 2023 09:20:10 GMT+0800 (China Standard Time)

Downgraded the usermin to 1.791, seems the File Manager is stable on this theme.

Got issues on 1.8xx and 2.xxx.

Ilia Ross · Answer 2 · Sat Sep 02 2023 18:10:24 GMT+0800 (China Standard Time)

Hello,

Is this Virtualmin created user? If not, how exactly did you create the user with which you're having this issue?

Did you perhaps change ACLs for this user you're having an issue with?

Are you logging in to Webmin (port 10000) or Usermin (port 20000).

tahder · Answer 3 · Sat Sep 02 2023 20:20:22 GMT+0800 (China Standard Time)

Hi @iliajie

Virtualmin not installed on this server and no ACLs been altered, the user is authenticated via mysql_pam. On the current setup only admin users able to use the webmin (port 10000) and the rest via Usermin (20000) as limit the functionality to use specific modules (even though possible to webmin).

As per tested again and allowed 1 user to use webmin, it doesn't have such an issue. Referring to Webmin 2.102, Authentic theme version 21.05.

In other words, only Usermin version above 1.791 have an issue with the File Manager.

Ilia Ross · Answer 4 · Sat Sep 02 2023 20:27:18 GMT+0800 (China Standard Time)

To streamline the troubleshooting process and save both time and effort, could you please provide detailed steps to reproduce the issue you're encountering? I recommend starting by creating a new Unix user named usermin-test. Document each step you take so that the issue can be reproduced consistently. Once you've done this, kindly share the steps with me. As I mentioned earlier, I have not been able to replicate the problem on my end.

Before we proceed further, could you please manually restart both Webmin and Usermin? After doing so, test to see if the issue persists when using a different browser in private or incognito mode.

Thank you!

tahder · Answer 5 · Sat Sep 02 2023 21:14:23 GMT+0800 (China Standard Time)

Restarting both webmin/usermin been tested previously and even using different browsers or it's privacy mode but still no avail.

These are the steps for further testing:

I tried to create a new user as per suggested, still using the Usermin 1.791, & Authentic theme version 19.45
useradd test101 passwd test101
As I used jailed environment
jk_jailuser -m -s /usr/bin/bash -j /home/students test101
Login to usermin - works as expected (able to browse using the left pane in the file manager)
Upgrade the usermin, as got in the repo (anyways can do via web dashboard directly to the webmin site)
dnf update usermin
Login to usermin using test101 (in this upgraded to Usermin 2.002, Authentic theme version 21.05), it works then logout. Try to login old users/accounts - it doesn't works
Restart usermin/webmin - login back test101, this time left pane malfunctions and displays those errors, same as those old accounts.

As per observation it created in the url https://example.com:20000/filemin/index.cgi?path=home%252Fstudents%252Fhome%252Ftest101%252F.usermin&xnavigation=1
You are not allowed to access /home%2Fstudents%2Fhome%2Ftest101%2F.usermin. The only allowed directories are: /home/students/home/test101.

By removing any path (after index.cgi) will refresh the File Manager - https://example.com:20000/filemin/index.cgi

Further observation on the old File Manager using Usermin 1.791, you can specify the accessible directories.

But for the new one (latest one), it doesn't have similar options (configurations), which I think this caused the issue.

Hope this helps.

Currently downgrading back (so user's not notice it :-) )
dnf downgrade usermin-1.791-1

Ilia Ross · Answer 6 · Mon Sep 04 2023 00:11:04 GMT+0800 (China Standard Time)

Further observation on the old File Manager using Usermin 1.791, you can specify the accessible directories.

Yes, I remember we decided to remove this option.

You are not allowed to access /home%2Fstudents%2Fhome%2Ftest101%2F.usermin. The only allowed directories are: /home/students/home/test101.

You may want to edit/create /etc/webmin/filemin/test101.acl file with the following configuration:

noconfig=1
work_as_user=test101
allowed_paths=/home/students/home/test101
work_as_root=0

.. it should work then, I think.

tahder · Answer 7 · Tue Sep 05 2023 06:00:12 GMT+0800 (China Standard Time)

You may want to edit/create /etc/webmin/filemin/test101.acl file with the following configuration:
noconfig=1
work_as_user=test101
allowed_paths=/home/students/home/test101
work_as_root=0
.. it should work then, I think.

I tried it's working well on webmin, and add the same configuration on the /etc/usermin/filemin/test101.acl, need to create that file. Thanks.

Are there any general configurations? as got more than 300 users which I need to recreate, even though can run a script. Tried using allowed path using a generic acl file using allowed_path=/home/students/home/$USER or add the work_as_user=$USER but not working as expected.