Hello,
pihole was running fine for months. Then I tried to access admin page and it didn't work. Also using /admin did still result in 403 page.
With some experience I tried to figure out what could be the problem. All solutions on the internet did not help. I use lighttpd - no other browser or configuration.
What I find very strange is that /var/www/html and all files in there belong to root. Shouldn't this be www-data:www-data?
But if I change it to www-data, I still cannot access it and pihole -r has a problem. I tried to repair - no change. I also tried the reinstall thing. No change. Below is the debug print.
During my tests I remove the usage from my Fritzbox. And I also changed ip adress from .10 to .11 - just in case this comes up in the debug file.
Expected Behaviour:
Rasperry pi
Accessing 192.168.x.11/admin shows admin interface
Actual Behaviour:
403 error
Debug Token:
https://tricorder.pi-hole.net/5GWTent8/
Actually, the directory (/var/www/html
) should belong to www-data
. The files and sub-directories inside html/
usually belong to root
.
Your debug log doesn't show any obvious problems.
Please post the full output of: ls -la /var/www/html/admin/
This how looks like on my Pi for quick chown / chmod fix:
$ pihole version
[..]
web version is v5.21 (Latest: v5.21)
EDIT: Oops, forgot to include some subfolders:
EDIT2: Oops, even more:
$ stat -c '%U:%G %a %n %F' /var/www{,/html{,/admin{,/*{,/*{,/*{,/*{,/*}}}}}}} | sort -k 4 -k 3,3 | column -t
root:root 755 /var/www directory
www-data:www-data 775 /var/www/html directory
root:root 755 /var/www/html/admin directory
root:root 755 /var/www/html/admin/img directory
root:root 755 /var/www/html/admin/img/favicons directory
root:root 755 /var/www/html/admin/scripts directory
root:root 755 /var/www/html/admin/scripts/pi-hole directory
root:root 755 /var/www/html/admin/scripts/pi-hole/js directory
root:root 755 /var/www/html/admin/scripts/pi-hole/php directory
root:root 755 /var/www/html/admin/scripts/vendor directory
root:root 755 /var/www/html/admin/style directory
root:root 755 /var/www/html/admin/style/themes directory
root:root 755 /var/www/html/admin/style/vendor directory
root:root 755 /var/www/html/admin/style/vendor/bootstrap directory
root:root 755 /var/www/html/admin/style/vendor/bootstrap/css directory
root:root 755 /var/www/html/admin/style/vendor/bootstrap/fonts directory
root:root 755 /var/www/html/admin/style/vendor/bootstrap/js directory
root:root 755 /var/www/html/admin/style/vendor/font-awesome directory
root:root 755 /var/www/html/admin/style/vendor/font-awesome/js directory
root:root 755 /var/www/html/admin/style/vendor/fonts directory
root:root 755 /var/www/html/admin/style/vendor/fonts/antonio directory
root:root 755 /var/www/html/admin/style/vendor/fonts/ubuntu-mono directory
root:root 755 /var/www/html/admin/style/vendor/SourceSansPro directory
root:root 644 /var/www/html/admin/api_db.php regular file
root:root 644 /var/www/html/admin/api_FTL.php regular file
root:root 644 /var/www/html/admin/api.php regular file
root:root 644 /var/www/html/admin/auditlog.php regular file
root:root 644 /var/www/html/admin/cname_records.php regular file
root:root 644 /var/www/html/admin/composer.json regular file
root:root 644 /var/www/html/admin/composer.lock regular file
root:root 644 /var/www/html/admin/CONTRIBUTING.md regular file
root:root 644 /var/www/html/admin/db_graph.php regular file
root:root 644 /var/www/html/admin/db_lists.php regular file
root:root 644 /var/www/html/admin/db_queries.php regular file
root:root 644 /var/www/html/admin/debug.php regular file
root:root 644 /var/www/html/admin/dns_records.php regular file
root:root 644 /var/www/html/admin/gravity.php regular file
root:root 644 /var/www/html/admin/groups-adlists.php regular file
root:root 644 /var/www/html/admin/groups-clients.php regular file
root:root 644 /var/www/html/admin/groups-domains.php regular file
root:root 644 /var/www/html/admin/groups.php regular file
root:root 644 /var/www/html/admin/img/boxed-bg-dark.png regular file
root:root 644 /var/www/html/admin/img/boxed-bg.png regular file
root:root 644 /var/www/html/admin/img/favicons/android-chrome-192x192.png regular file
root:root 644 /var/www/html/admin/img/favicons/android-chrome-512x512.png regular file
root:root 644 /var/www/html/admin/img/favicons/apple-touch-icon.png regular file
root:root 644 /var/www/html/admin/img/favicons/favicon-16x16.png regular file
root:root 644 /var/www/html/admin/img/favicons/favicon-32x32.png regular file
root:root 644 /var/www/html/admin/img/favicons/favicon.ico regular file
root:root 644 /var/www/html/admin/img/favicons/manifest.json regular file
root:root 644 /var/www/html/admin/img/favicons/mstile-150x150.png regular file
root:root 644 /var/www/html/admin/img/favicons/safari-pinned-tab.svg regular file
root:root 644 /var/www/html/admin/img/logo.svg regular file
root:root 644 /var/www/html/admin/img/pihole_icon.svg regular file
root:root 644 /var/www/html/admin/index.php regular file
root:root 644 /var/www/html/admin/LICENSE regular file
root:root 644 /var/www/html/admin/login.php regular file
root:root 644 /var/www/html/admin/logout.php regular file
root:root 644 /var/www/html/admin/messages.php regular file
root:root 644 /var/www/html/admin/network.php regular file
root:root 644 /var/www/html/admin/package.json regular file
root:root 644 /var/www/html/admin/package-lock.json regular file
root:root 644 /var/www/html/admin/phpstan.neon.dist regular file
root:root 644 /var/www/html/admin/queries.php regular file
root:root 644 /var/www/html/admin/queryads.php regular file
root:root 644 /var/www/html/admin/README.md regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/auditlog.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/customcname.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/customdns.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/db_graph.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/db_lists.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/db_queries.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/debug.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/footer.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/gravity.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/groups-adlists.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/groups-clients.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/groups-domains.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/groups.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/index.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/ip-address-sorting.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/messages.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/network.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/queries.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/queryads.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/restartdns.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/settings.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/taillog-FTL.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/taillog.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/js/utils.js regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/api_token.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/auth.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/customcname.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/customdns.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/database.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/debug.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/footer.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/FTL.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/func.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/gravity.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/gravity.sh.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/groups.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/header_authenticated.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/header.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/message.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/network.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/password.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/persistentlogin_token.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/queryads.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/savesettings.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/sidebar.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/tailLog.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/teleporter.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/theme.php regular file
root:root 644 /var/www/html/admin/scripts/pi-hole/php/update_checker.php regular file
root:root 644 /var/www/html/admin/scripts/vendor/adminlte.min.js regular file
root:root 644 /var/www/html/admin/scripts/vendor/bootstrap-notify.min.js regular file
root:root 644 /var/www/html/admin/scripts/vendor/bootstrap-select.min.js regular file
root:root 644 /var/www/html/admin/scripts/vendor/bootstrap-select.min.js.map regular file
root:root 644 /var/www/html/admin/scripts/vendor/bootstrap-toggle.min.js regular file
root:root 644 /var/www/html/admin/scripts/vendor/bootstrap-toggle.min.js.map regular file
root:root 644 /var/www/html/admin/scripts/vendor/chartjs-adapter-moment.js regular file
root:root 644 /var/www/html/admin/scripts/vendor/chartjs-adapter-moment.min.js.map regular file
root:root 644 /var/www/html/admin/scripts/vendor/chart.min.js regular file
root:root 644 /var/www/html/admin/scripts/vendor/datatables.buttons.min.js regular file
root:root 644 /var/www/html/admin/scripts/vendor/datatables.min.js regular file
root:root 644 /var/www/html/admin/scripts/vendor/datatables.select.min.js regular file
root:root 644 /var/www/html/admin/scripts/vendor/daterangepicker.min.js regular file
root:root 644 /var/www/html/admin/scripts/vendor/daterangepicker.min.js.map regular file
root:root 644 /var/www/html/admin/scripts/vendor/jquery.confirm.min.js regular file
root:root 644 /var/www/html/admin/scripts/vendor/jquery.min.js regular file
root:root 644 /var/www/html/admin/scripts/vendor/LICENSE regular file
root:root 644 /var/www/html/admin/scripts/vendor/moment.min.js regular file
root:root 644 /var/www/html/admin/scripts/vendor/qrcode.php regular file
root:root 644 /var/www/html/admin/scripts/vendor/select2.min.js regular file
root:root 644 /var/www/html/admin/settings.php regular file
root:root 644 /var/www/html/admin/style/pi-hole.css regular file
root:root 644 /var/www/html/admin/style/themes/default-auto.css regular file
root:root 644 /var/www/html/admin/style/themes/default-dark.css regular file
root:root 644 /var/www/html/admin/style/themes/default-darker.css regular file
root:root 644 /var/www/html/admin/style/themes/default-light.css regular file
root:root 644 /var/www/html/admin/style/themes/high-contrast.css regular file
root:root 644 /var/www/html/admin/style/themes/high-contrast-dark.css regular file
root:root 644 /var/www/html/admin/style/themes/lcars.css regular file
root:root 644 /var/www/html/admin/style/themes/lcars-picard.css regular file
root:root 644 /var/www/html/admin/style/vendor/AdminLTE.min.css regular file
root:root 644 /var/www/html/admin/style/vendor/animate.min.css regular file
root:root 644 /var/www/html/admin/style/vendor/bootstrap/css/bootstrap.min.css regular file
root:root 644 /var/www/html/admin/style/vendor/bootstrap/css/bootstrap.min.css.map regular file
root:root 644 /var/www/html/admin/style/vendor/bootstrap/fonts/glyphicons-halflings-regular.eot regular file
root:root 644 /var/www/html/admin/style/vendor/bootstrap/fonts/glyphicons-halflings-regular.svg regular file
root:root 644 /var/www/html/admin/style/vendor/bootstrap/fonts/glyphicons-halflings-regular.ttf regular file
root:root 644 /var/www/html/admin/style/vendor/bootstrap/fonts/glyphicons-halflings-regular.woff regular file
root:root 644 /var/www/html/admin/style/vendor/bootstrap/fonts/glyphicons-halflings-regular.woff2 regular file
root:root 644 /var/www/html/admin/style/vendor/bootstrap/js/bootstrap.min.js regular file
root:root 644 /var/www/html/admin/style/vendor/bootstrap-select.min.css regular file
root:root 644 /var/www/html/admin/style/vendor/bootstrap-toggle.min.css regular file
root:root 644 /var/www/html/admin/style/vendor/datatables_extensions.min.css regular file
root:root 644 /var/www/html/admin/style/vendor/datatables.min.css regular file
root:root 644 /var/www/html/admin/style/vendor/daterangepicker.min.css regular file
root:root 644 /var/www/html/admin/style/vendor/font-awesome/js/all.min.js regular file
root:root 644 /var/www/html/admin/style/vendor/fonts/antonio/antonio.css regular file
root:root 644 /var/www/html/admin/style/vendor/fonts/antonio/antonio-v1-latin-ext_latin-100.woff regular file
root:root 644 /var/www/html/admin/style/vendor/fonts/antonio/antonio-v1-latin-ext_latin-100.woff2 regular file
root:root 644 /var/www/html/admin/style/vendor/fonts/antonio/antonio-v1-latin-ext_latin-700.woff regular file
root:root 644 /var/www/html/admin/style/vendor/fonts/antonio/antonio-v1-latin-ext_latin-700.woff2 regular file
root:root 644 /var/www/html/admin/style/vendor/fonts/antonio/antonio-v1-latin-ext_latin-regular.woff regular file
root:root 644 /var/www/html/admin/style/vendor/fonts/antonio/antonio-v1-latin-ext_latin-regular.woff2 regular file
root:root 644 /var/www/html/admin/style/vendor/fonts/ubuntu-mono/ubuntu-mono.css regular file
root:root 644 /var/www/html/admin/style/vendor/fonts/ubuntu-mono/ubuntu-mono-v10-latin-ext_latin-700italic.woff regular file
root:root 644 /var/www/html/admin/style/vendor/fonts/ubuntu-mono/ubuntu-mono-v10-latin-ext_latin-700italic.woff2 regular file
root:root 644 /var/www/html/admin/style/vendor/fonts/ubuntu-mono/ubuntu-mono-v10-latin-ext_latin-700.woff regular file
root:root 644 /var/www/html/admin/style/vendor/fonts/ubuntu-mono/ubuntu-mono-v10-latin-ext_latin-700.woff2 regular file
root:root 644 /var/www/html/admin/style/vendor/fonts/ubuntu-mono/ubuntu-mono-v10-latin-ext_latin-italic.woff regular file
root:root 644 /var/www/html/admin/style/vendor/fonts/ubuntu-mono/ubuntu-mono-v10-latin-ext_latin-italic.woff2 regular file
root:root 644 /var/www/html/admin/style/vendor/fonts/ubuntu-mono/ubuntu-mono-v10-latin-ext_latin-regular.woff regular file
root:root 644 /var/www/html/admin/style/vendor/fonts/ubuntu-mono/ubuntu-mono-v10-latin-ext_latin-regular.woff2 regular file
root:root 644 /var/www/html/admin/style/vendor/icheck-bootstrap.min.css regular file
root:root 644 /var/www/html/admin/style/vendor/icheck-material.min.css regular file
root:root 644 /var/www/html/admin/style/vendor/js-warn.css regular file
root:root 644 /var/www/html/admin/style/vendor/LICENSE regular file
root:root 644 /var/www/html/admin/style/vendor/select2.min.css regular file
root:root 644 /var/www/html/admin/style/vendor/SourceSansPro/SourceSansPro.css regular file
root:root 644 /var/www/html/admin/style/vendor/SourceSansPro/source-sans-pro-v13-latin-300italic.woff regular file
root:root 644 /var/www/html/admin/style/vendor/SourceSansPro/source-sans-pro-v13-latin-300italic.woff2 regular file
root:root 644 /var/www/html/admin/style/vendor/SourceSansPro/source-sans-pro-v13-latin-300.woff regular file
root:root 644 /var/www/html/admin/style/vendor/SourceSansPro/source-sans-pro-v13-latin-300.woff2 regular file
root:root 644 /var/www/html/admin/style/vendor/SourceSansPro/source-sans-pro-v13-latin-600italic.woff regular file
root:root 644 /var/www/html/admin/style/vendor/SourceSansPro/source-sans-pro-v13-latin-600italic.woff2 regular file
root:root 644 /var/www/html/admin/style/vendor/SourceSansPro/source-sans-pro-v13-latin-600.woff regular file
root:root 644 /var/www/html/admin/style/vendor/SourceSansPro/source-sans-pro-v13-latin-600.woff2 regular file
root:root 644 /var/www/html/admin/style/vendor/SourceSansPro/source-sans-pro-v13-latin-700.woff regular file
root:root 644 /var/www/html/admin/style/vendor/SourceSansPro/source-sans-pro-v13-latin-700.woff2 regular file
root:root 644 /var/www/html/admin/style/vendor/SourceSansPro/source-sans-pro-v13-latin-italic.woff regular file
root:root 644 /var/www/html/admin/style/vendor/SourceSansPro/source-sans-pro-v13-latin-italic.woff2 regular file
root:root 644 /var/www/html/admin/style/vendor/SourceSansPro/source-sans-pro-v13-latin-regular.woff regular file
root:root 644 /var/www/html/admin/style/vendor/SourceSansPro/source-sans-pro-v13-latin-regular.woff2 regular file
root:root 644 /var/www/html/admin/taillog-FTL.php regular file
root:root 644 /var/www/html/admin/taillog.php regular file
Hi,
this is my list of /var/www/html/admin. For me this is strange to have it belong to root, as this could be a potential security risk. But it looks like this is on purpose.
pi@pihole:/var/www/html/admin $ ls -la
total 600
drwxr-xr-x 7 root root 4096 Oct 12 20:54 .
drwxrwxr-x 3 www-data www-data 4096 Apr 25 19:12 ..
-rw-r--r-- 1 root root 15490 Oct 12 20:54 api_db.php
-rw-r--r-- 1 root root 15125 Oct 12 20:54 api_FTL.php
-rw-r--r-- 1 root root 6320 Oct 12 20:54 api.php
-rw-r--r-- 1 root root 2630 Oct 12 20:54 auditlog.php
-rw-r--r-- 1 root root 3990 Oct 12 20:54 cname_records.php
-rw-r--r-- 1 root root 8 Oct 12 20:54 .codespellignore
-rw-r--r-- 1 root root 354 Oct 12 20:54 composer.json
-rw-r--r-- 1 root root 2825 Oct 12 20:54 composer.lock
-rw-r--r-- 1 root root 2348 Oct 12 20:54 CONTRIBUTING.md
-rw-r--r-- 1 root root 2677 Oct 12 20:54 db_graph.php
-rw-r--r-- 1 root root 5003 Oct 12 20:54 db_lists.php
-rw-r--r-- 1 root root 9891 Oct 12 20:54 db_queries.php
-rw-r--r-- 1 root root 1668 Oct 12 20:54 debug.php
-rw-r--r-- 1 root root 3589 Oct 12 20:54 dns_records.php
-rw-r--r-- 1 root root 577 Oct 12 20:54 .editorconfig
drwxr-xr-x 8 root root 4096 Oct 12 20:57 .git
-rw-r--r-- 1 root root 12 Oct 12 20:54 .gitattributes
drwxr-xr-x 3 root root 4096 Oct 12 20:54 .github
-rw-r--r-- 1 root root 194 Oct 12 20:54 .gitignore
-rw-r--r-- 1 root root 1352 Oct 12 20:54 gravity.php
-rw-r--r-- 1 root root 3722 Oct 12 20:54 groups-adlists.php
-rw-r--r-- 1 root root 4526 Oct 12 20:54 groups-clients.php
-rw-r--r-- 1 root root 7978 Oct 12 20:54 groups-domains.php
-rw-r--r-- 1 root root 3289 Oct 12 20:54 groups.php
drwxr-xr-x 3 root root 4096 Oct 12 20:54 img
-rw-r--r-- 1 root root 10162 Oct 12 20:54 index.php
-rw-r--r-- 1 root root 14163 Oct 12 20:54 LICENSE
-rw-r--r-- 1 root root 5394 Oct 12 20:54 login.php
-rw-r--r-- 1 root root 369 Oct 12 20:54 logout.php
-rw-r--r-- 1 root root 1809 Oct 12 20:54 messages.php
-rw-r--r-- 1 root root 2960 Oct 12 20:54 network.php
-rw-r--r-- 1 root root 2957 Oct 12 20:54 package.json
-rw-r--r-- 1 root root 233954 Oct 12 20:54 package-lock.json
-rw-r--r-- 1 root root 824 Oct 12 20:54 .php-cs-fixer.dist.php
-rw-r--r-- 1 root root 116 Oct 12 20:54 phpstan.neon.dist
-rw-r--r-- 1 root root 6924 Oct 12 20:54 queries.php
-rw-r--r-- 1 root root 2035 Oct 12 20:54 queryads.php
-rw-r--r-- 1 root root 9226 Oct 12 20:54 README.md
drwxr-xr-x 4 root root 4096 Feb 16 2024 scripts
-rw-r--r-- 1 root root 105697 Oct 12 20:54 settings.php
-rw-r--r-- 1 root root 133 Oct 12 20:54 .stickler.yml
drwxr-xr-x 4 root root 4096 Oct 12 20:54 style
-rw-r--r-- 1 root root 950 Oct 12 20:54 taillog-FTL.php
-rw-r--r-- 1 root root 949 Oct 12 20:54 taillog.php
-rw-r--r-- 1 root root 56 Oct 12 20:54 .yamllint.conf
So everyone should have read access.
I dont see anything wrong.
You could try run my stat command and check if maybe one of the files/folders in the subfolders lack proper permissions/ownership ^^^
What error(s) is/are displayed when tailing the logs live while accessing the webGUI?
sudo tail -F /var/log/lighttpd/{access,error}-pihole.log
You could also try a fresh start:
Hi Borat,
Might be best to wipe the local repos and start over. (Your configs will be preserved this way)
sudo rm -rf /etc/.pihole
sudo git clone -q --depth 1 https://github.com/pi-hole/pi-hole.git /etc/.pihole
sudo rm -rf /var/www/html/admin
sudo git clone -q --depth 1 https://github.com/pi-hole/adminLTE.git /var/www/html/admin
pihole -r
After the last step, choose the repair option, and you should be back on track
Nothing wrong with that:
$ ps -o uid,user,gid,group,pid,cmd -C lighttpd
UID USER GID GROUP PID CMD
33 www-data 33 www-data 2609 /usr/sbin/lighttpd -D -f /etc/lighttpd/lighttpd.conf
I did the check with the stat-command. Everything looked fine. For some strange reason this seams to have fixed my problem (or it fixed itself?). The GUI login is working again. Thanks for any help.
rdwebdesign
Split this topic
October 22, 2024, 8:41pm
7
A post was split to a new topic: Unaable to visit http://pi.hole
system
Closed
November 12, 2024, 8:41pm
8
This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.