imagemagick path not accepted
|
juerg
Joined: 2008-12-09
Posts: 3 |
Posted: Tue, 2008-12-09 16:51
|
|
I just upgraded to Gallery 2.3 from 2.any Now i can't activate Imagemagic under Site Admin Modules. I am shure i have imagemagick on my root server (hetzner) installed. When i use "convert" of any of the tools in any directory it works. So i checked also this tools are realy in /usr/bin/. When i try to insert the Path in Site Admin Modules i get this error: "Der von Ihnen eingegebene Pfad ist kein gültiger Ordner oder nicht zugreifbar." Will tell me "the path in not valid or not accessable. Any hints? |
|
Posts: 31
Gallery version 2.3 (German installation)
PHP version 5.2.6
Webserver Apache/2.2.3 (CentOS)
Database MySql 5.0.58
Activated toolkits GD
Operating system (e.g. Linux)
Browser Firefox 3.0.4
exactly the same problem here! Although I used (and still use) NetPBM on the older 2.x version (just pnmflip installed) I may as well not activate it on the 2.3 installation.
Got an older 2.x working on the same domain like the vanilla installation of 2.3, using the same path to ImageMagick and NetPBM results in the same errormessage like juerg described... so only GD may be used.
Just had a chat with my hoster, he assures, that "/usr/bin" works for ImageMagick!
p.s.: any hints about how to see the version number of my older installation?
Posts: 25967
Could be a open_base_directory issue.
Between G2.2 and G2.3, we have improved the open_basedir checks in G2,
avoiding PHP warnings when attempting to call exec() on a path that isn't
in open_basedir.
Somehow, some people managed to add /usr/bin/ and other paths as binary
path for neptbm and other modules in G2.2.
Now they see an error on upgrade for paths that aren't whitelisted.
See:
http://gallery.menalto.com/node/82736#comment-290503
Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team
Posts: 31
@ floridave:
I really think, there is an "improvment" to worse! Working with other graphic programs, using "/usr/bin" without any problem, using exec(), I really can not understand what here´s going on!
So, I talked to my hoster and he wrote me:
Which means, that they aren´t willing to oben_basedir to usr/bin. By standard, the only pathes which are opened are /httpdocs and /tmp. Surely I could rent a dedicated rootserver (which would cause definitly more costs!). Copying the binaries to another path (which would be accessible to open_basedir) is not an answer, as I do not want another handling for every program.
As written in the german section of the forum, I as well may not understand, why this problem seems to be limited to Gallery2, as I do not know any other gallery (or CMS) causing this problem. Will I update to 2.3 I am stucked just with GD. Will I not upgrade (because i need at least ImageMagick!) I will have an insecure gallerie...
So what means this for those users, which do not have access to open_basedir? I was an happy Gallery2 user and donated for all the projects where I used it. But, as it seems, Gallery2 died of overpatching!
Posts: 3
Ok, i have a root server from hetzner.de. I did the described thing here http://www.isp-control.net/forum/showthread.php?tid=4044&highlight=open_basedir but nothing changed.
So - is there anybody out there tell me what i can do to fix this http://www.bibergugger.ch/gallery/main.php
Posts: 3
Ok i fixed it.
There was a "disabled_funtions" in php.ini "exec, passthrough" to remove.
Posts: 31
...happy to hear, that it worked out for you! As already mentioned, for Sites with no root-server, this problem remains!
No other suggestion how to resolve it?!
Would be great to hear some comments from the programmers...
Posts: 7894
Most hosts give you a directory to place executable scripts. I know we supply such a directory for each client.
You could always copy the binaries to a place within your open_basedir limits.
-s
FlashYourWeb and Your Gallery with The E2 XML Media Player for Gallery2
Posts: 31
Hello suprsidr!
This was as well a suggestion in the german part of the forum.
I have, although, some problems with this idea, which should be a possible solution, just and only for Gallery2?!
- I do not have access to the "7usr/bin" directory of the used linux package, as I am on a hosted environment. How should I copy those files? Is there any quick solution to just download the linux versions of ImageMagick (what ever version!) and just copy them to an directory at my Space?
- As the open_basedir just is for /httpdocs and /tmp, I would have to give access from outside to those files, i.e. in webroot. Isn´t this in some kind of an security issue?
- Will the (possible) path ".../.../.../httpdocs/.../Binaries for ImageMagick" be valid for Galery2?
A big workaround for this problem, which will cause for sure some more problems!
Posts: 7894
X-Bit, quite honestly this is a conversation you should be having with your host. They setup your open_basedir restrictions in the first place.
I'm not even sure how previous versions of gallery sidestepped this restriction. As far as I knew it wasn't possible.
If gallery's new security updates halted your free ride, I'm sorry. But its not gallery's fault your host does not allow such freedoms.
I'm sure somebody out there would have an older version if you need, but unfortunately downgrading is nearly impossible - you'd probably need a fresh install.
-s
FlashYourWeb and Your Gallery with The E2 XML Media Player for Gallery2
Posts: 31
who who... take it easy suprsidr! I wasn´t complaining about anything! I am a very happy Gallery2 user, glad, that such a fantastic program exists and even for free...
I will double check this with my hoster. On the other hand, I do understand that he doesn´t wants to fully open_basedir /usr/bin... for sure it would be a big problem on the security side!
At this point, it would be helpfull, to understand why other programms do not have this problem. I will double check this with another gallery and report here.
After all, my old Gallery2 (which is not mine, its a customer using it) is still up and running. There is, at the moment, no nead to hurry...So it would be very usefull, to understand, what the 2.3 Gallery2 got different, as the hoster (one of the biggest ones in Switzerland) for sure would know this problem, if it would be connected to every code, not beeing able to use ImageMagick, isn´t it?!
As I do understand "whitelisting" the /usr/bin with open_basedir ist the same thing then opening up?!
Sorry, if my comments had been rude for you, it wasn´t meant like that!
...just for closing my appologies, G2Image would work, just now I have this tiny little problem left ;)
Posts: 7894
So couldn't you get a copy of pre-compiled imagemagick binaries, place them in a legal directory and protect them with .htaccess?
-s
FlashYourWeb and Your Gallery with The E2 XML Media Player for Gallery2
Posts: 25967
How does your host expect files to be run in /usr/bin if the webserver cant run them because of a open_basedir restriction?
I guess you can install netPBM ( we have a precompiled version that should work on your host ) in a directory that is not restricted, as suprsidr suggests.
Perhaps they have not had extensive and costly security audits?
Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team
Posts: 31
As promised, I would like to give a Feedback, regarding other gallerie Programs, having or not having this problem.
With the same hoster, I am running on another client site and on another server an older version of Coppermine, no problems there, using ImageMagick. Installing the actual version of Coppermine and trying to use /usr/bin ended up in the same problem like Gallery2... path not found or no access!
Showing this to my hoster, it probably will proove him, that the settings on the servers are wrong or truncated...
This little test prooves something I actually already knew. Gallery2 is my favorite and I will go on contributing to you, every time I use it for a client site!
So let´s see, what will happen and how the hoster will proceed.
Posts: 19
I have the same problem with gallery 2 vers.2.3. has anybody an solution?!
Posts: 25967
suprsidr gave you a solution 2 posts up.
next solution; have you host fix the open_basedir restriction.
Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team
Posts: 31
As I am still waiting for my Hoster to change some vhost.conf settings (new path to ImageMagick files will be "/var/www/vhosts/mydomain.com/httpdocs:/tmp:/usr/bin"), I would be glad to know where I could get those netPBM files from you. It should help me to release the Site with fotos, as I couldn´t do this until know, having only access to GD!
Thanks for your help!
Posts: 25967
I don't think that would work.
I would create a new folder:
/var/www/vhosts/mydomain.com/httpdocs/NetPBM
then put the files in that new dir
chmod the files to 777
downloads page -> Supporting binaries -> NetPBM for several platforms
FAQ: I am having trouble configuring a graphics toolkit (ImageMagick, NetPBM or ffmpeg). Help?
Then the path for your new NetPBM binaries would be:
/var/www/vhosts/mydomain.com/httpdocs/NetPBM
Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team
Posts: 19
nothing works, ithink the new version is a beta ;-(! im very dissapointet about! bad image for gallery2. for an newbie the install routine is to difficult.
i hope gallery3 will be better!
Posts: 31
@floricdave
I downloaded the NetPBM binaries and, as it seems, my hoster has an Redhat settup. Copying those files und the httpdocs/ directory resulted as following:
Testergebniss der NetPBM-Binärdatei (Testresults for NetPBM Binaries)
Name der Binärdatei.....Bestanden/Fehlgeschlagen
pnmscale................Bestanden
pnmcut..................Bestanden
pnmfile.................Bestanden
pnmcomp oder pamcomp....Fehlgeschlagen (error!)
Fehlermeldungen: (errormsg: )
Datei existiert nicht (File does not exist)
pnmflip................Bestanden
jhead..................Bestanden
...where "Bestanden" means ok. As you may see, "pnmcomp" or "pamcomp" has not been found. Looking at the binaries, prooves that those files aren´t included in the distribution, i.e. I may not conclude the setup for NetPBM!
Still got no reaction from my hoster, NetPBM distribution not complete... Project halted... I think, I will return to the last "stable" Version of Gallery2, 2.2.6 which worked like a charm!
Any hints about where I could get those missing files for Redhat?!
By the way: Merry Christmas and a happy new year to all of you!
***********************************
Above the whole errormessage:
realpath(/var/www/vhosts/mydomain.com/httpdocs/tmp/)
realpath(/var/www/vhosts/mydomain.com/httpdocs)
is_dir(/var/www/vhosts/mydomain.com/httpdocs/tmp/)
file_exists(/var/www/vhosts/mydomain.com/httpdocs/tmp/pnmscale)
getParameter exec.beNice for core plugin
Executing: ( "/var/www/vhosts/mydomain.com/httpdocs/tmp/pnmscale" "--version"
)
2>"/var/www/vhosts/mydomain.com/httpdocs/v2.0/gallery2/Gallerie_Bilderverzeichnis/tmp/g2dbgsuNVkk"
getParameter exec.expectedStatus for core plugin
file_exists(/var/www/vhosts/mydomain.com/httpdocs/v2.0/gallery2/Gallerie_Bilderverzeichnis/tmp/g2dbgsuNVkk)
filesize(/var/www/vhosts/mydomain.com/httpdocs/v2.0/gallery2/Gallerie_Bilderverzeichnis/tmp/g2dbgsuNVkk)
fopen(/var/www/vhosts/mydomain.com/httpdocs/v2.0/gallery2/Gallerie_Bilderverzeichnis/tmp/g2dbgsuNVkk,
r, 0)
feof(Resource id #101)
fgets(Resource id #101, 4096)
feof(Resource id #101)
fgets(Resource id #101, 4096)
feof(Resource id #101)
fgets(Resource id #101, 4096)
feof(Resource id #101)
fgets(Resource id #101, 4096)
feof(Resource id #101)
fgets(Resource id #101, 4096)
feof(Resource id #101)
fgets(Resource id #101, 4096)
feof(Resource id #101)
fclose(Resource id #101)
unlink(/var/www/vhosts/mydomain.com/httpdocs/v2.0/gallery2/Gallerie_Bilderverzeichnis/tmp/g2dbgsuNVkk)
Regular Output:
Error Output:
pnmscale: Using libpbm from Netpbm Version: Netpbm 9.12
pnmscale: Compiled Sat Apr 14 15:35:35 PDT 2001 by user "bharat"
pnmscale: BSD defined
pnmscale: RGB_ENV='RGBDEF'
pnmscale: RGBENV= 'RGBDEF' (env vbl is unset)
Status: 0 (expected 0)
file_exists(/var/www/vhosts/mydomain.com/httpdocs/tmp/pnmcut)
Executing: ( "/var/www/vhosts/mydomain.com/httpdocs/tmp/pnmcut" "--version" )
2>"/var/www/vhosts/mydomain.com/httpdocs/v2.0/gallery2/Gallerie_Bilderverzeichnis/tmp/g2dbgFUblQS"
file_exists(/var/www/vhosts/mydomain.com/httpdocs/v2.0/gallery2/Gallerie_Bilderverzeichnis/tmp/g2dbgFUblQS)
filesize(/var/www/vhosts/mydomain.com/httpdocs/v2.0/gallery2/Gallerie_Bilderverzeichnis/tmp/g2dbgFUblQS)
fopen(/var/www/vhosts/mydomain.com/httpdocs/v2.0/gallery2/Gallerie_Bilderverzeichnis/tmp/g2dbgFUblQS,
r, 0)
feof(Resource id #103)
fgets(Resource id #103, 4096)
feof(Resource id #103)
fgets(Resource id #103, 4096)
feof(Resource id #103)
fgets(Resource id #103, 4096)
feof(Resource id #103)
fgets(Resource id #103, 4096)
feof(Resource id #103)
fgets(Resource id #103, 4096)
feof(Resource id #103)
fgets(Resource id #103, 4096)
feof(Resource id #103)
fclose(Resource id #103)
unlink(/var/www/vhosts/mydomain.com/httpdocs/v2.0/gallery2/Gallerie_Bilderverzeichnis/tmp/g2dbgFUblQS)
Regular Output:
Error Output:
pnmcut: Using libpbm from Netpbm Version: Netpbm 9.12
pnmcut: Compiled Sat Apr 14 15:35:35 PDT 2001 by user "bharat"
pnmcut: BSD defined
pnmcut: RGB_ENV='RGBDEF'
pnmcut: RGBENV= 'RGBDEF' (env vbl is unset)
Status: 0 (expected 0)
file_exists(/var/www/vhosts/mydomain.com/httpdocs/tmp/pnmfile)
Executing: ( "/var/www/vhosts/mydomain.com/httpdocs/tmp/pnmfile" "--version"
)
2>"/var/www/vhosts/mydomain.com/httpdocs/v2.0/gallery2/Gallerie_Bilderverzeichnis/tmp/g2dbgU1Qlnr"
file_exists(/var/www/vhosts/mydomain.com/httpdocs/v2.0/gallery2/Gallerie_Bilderverzeichnis/tmp/g2dbgU1Qlnr)
filesize(/var/www/vhosts/mydomain.com/httpdocs/v2.0/gallery2/Gallerie_Bilderverzeichnis/tmp/g2dbgU1Qlnr)
fopen(/var/www/vhosts/mydomain.com/httpdocs/v2.0/gallery2/Gallerie_Bilderverzeichnis/tmp/g2dbgU1Qlnr,
r, 0)
feof(Resource id #105)
fgets(Resource id #105, 4096)
feof(Resource id #105)
fgets(Resource id #105, 4096)
feof(Resource id #105)
fgets(Resource id #105, 4096)
feof(Resource id #105)
fgets(Resource id #105, 4096)
feof(Resource id #105)
fgets(Resource id #105, 4096)
feof(Resource id #105)
fgets(Resource id #105, 4096)
feof(Resource id #105)
fclose(Resource id #105)
unlink(/var/www/vhosts/mydomain.com/httpdocs/v2.0/gallery2/Gallerie_Bilderverzeichnis/tmp/g2dbgU1Qlnr)
Regular Output:
Error Output:
pnmfile: Using libpbm from Netpbm Version: Netpbm 9.12
pnmfile: Compiled Sat Apr 14 15:35:35 PDT 2001 by user "bharat"
pnmfile: BSD defined
pnmfile: RGB_ENV='RGBDEF'
pnmfile: RGBENV= 'RGBDEF' (env vbl is unset)
Status: 0 (expected 0)
file_exists(/var/www/vhosts/mydomain.com/httpdocs/tmp/pnmcomp)
file_exists(/var/www/vhosts/mydomain.com/httpdocs/tmp/pamcomp)
Loading plugin netpbm
netpbm plugin successfully instantiated
file_exists(/var/www/vhosts/mydomain.com/httpdocs/tmp/pnmflip)
realpath(/var/www/vhosts/mydomain.com/httpdocs/tmp/)
realpath(/var/www/vhosts/mydomain.com/httpdocs)
is_dir(/var/www/vhosts/mydomain.com/httpdocs/tmp/)
realpath(/var/www/vhosts/mydomain.com/httpdocs/tmp/jhead)
realpath(/var/www/vhosts/mydomain.com/httpdocs)
file_exists(/var/www/vhosts/mydomain.com/httpdocs/tmp/jhead)
Executing: ( "/var/www/vhosts/mydomain.com/httpdocs/tmp/jhead" "-V" )
2>"/var/www/vhosts/mydomain.com/httpdocs/v2.0/gallery2/Gallerie_Bilderverzeichnis/tmp/g2dbgXHX5VZ"
file_exists(/var/www/vhosts/mydomain.com/httpdocs/v2.0/gallery2/Gallerie_Bilderverzeichnis/tmp/g2dbgXHX5VZ)
filesize(/var/www/vhosts/mydomain.com/httpdocs/v2.0/gallery2/Gallerie_Bilderverzeichnis/tmp/g2dbgXHX5VZ)
unlink(/var/www/vhosts/mydomain.com/httpdocs/v2.0/gallery2/Gallerie_Bilderverzeichnis/tmp/g2dbgXHX5VZ)
Regular Output:
Jhead version: 2.84 Compiled: Oct 4 2008
Error Output:
Status: 0 (expected 0)
Posts: 31
just received an answer from my hoster. He says, that they are running "centos 5.2" on linux... Which NetPBM distribution would work with this????
Thanks for helping me out installing at least NetPBM!
Posts: 25967
shold be good to go then.
you should still be able to activate the module with the 2 missing files. I don't think they are required.
This should work:
http://downloads.sourceforge.net/gallery/netpbm_gallery-1.4-pl2-linux-intel.zip?modtime=1086220800&big_mirror=1
If netPBM and/or IM worked in a previous version then your host has a open_base restriction that should be fixed.
Our changes are to make gallery more secure.
Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team
Posts: 72
I just recently upgraded two installs I have of gallery and one of them is having the same problem that is described above. However the other one is not, they are both on the same server, but different directories, they are both upgrades and I used the same files to upgrade both. I even have them both pointed to the same /usr/bin/ directory, but only one of them works.
I am assuming that my open_basedir restrictions are Okay because it works on one of my installs. Does anyone know why the other one would not work?
Also on the install that does not work any images that I upload all come in corrupted. Could these problems be related?
Thanks
Ryan
Posts: 72
Hooray I figured it out. I saw that there was some debug (below) and that the debug indicated that I was missing some files in the tmp directory. So I copied the tmp dir from the working gallery to the broken gallery and imagemagick started working. My image corruption problem also went away.
is_dir(/usr/bin/)
Loading plugin imagemagick
imagemagick plugin successfully instantiated
Check the version of the imagemagick plugin
The version of the imagemagick plugin is ok
getcwd()
chdir(/home/ryanmc/RyansWorldGalleryImages/tmp/)
is_dir(/usr/bin/)
file_exists(/usr/bin/gm)
file_exists(/usr/bin/identify)
getParameter exec.beNice for core plugin
Executing: (nice "/usr/bin/identify"
"/home/ryanmc/public_html/ryansworld/gallery/modules/imagemagick/data/test.gif"
) 2>"/tmp/g2dbgLCMRiV"
getParameter exec.expectedStatus for core plugin
file_exists(/tmp/g2dbgLCMRiV)
filesize(/tmp/g2dbgLCMRiV)
unlink(/tmp/g2dbgLCMRiV)
Regular Output:
/home/ryanmc/public_html/ryansworld/gallery/modules/imagemagick/data/test.gif
GIF 50x50 50x50+0+0 PseudoClass 8c 8-bit 232b
Error Output:
Status: 0 (expected 0)
is_dir(/usr/bin/)
file_exists(/usr/bin/gm)
tempnam(/home/ryanmc/RyansWorldGalleryImages/tmp/, imgk_)
file_exists(/usr/bin/convert)
Executing: (nice "/usr/bin/convert" "-size" "200x200" "-geometry"
"200x200"
"/home/ryanmc/public_html/ryansworld/gallery/modules/imagemagick/data/test.gif"
"gif:/home/ryanmc/RyansWorldGalleryImages/tmp/imgk_g2Mt0G" )
2>"/tmp/g2dbgNOyQKs"
file_exists(/tmp/g2dbgNOyQKs)
filesize(/tmp/g2dbgNOyQKs)
fopen(/tmp/g2dbgNOyQKs, r, 0)
feof(Resource id #195)
fgets(Resource id #195, 4096)
feof(Resource id #195)
fgets(Resource id #195, 4096)
feof(Resource id #195)
fclose(Resource id #195)
unlink(/tmp/g2dbgNOyQKs)
Regular Output:
Error Output:
convert: unable to open image
`/home/ryanmc/RyansWorldGalleryImages/tmp/imgk_g2Mt0G': No such file or
directory.
Status: 1 (expected 0)
unlink(/home/ryanmc/RyansWorldGalleryImages/tmp/imgk_g2Mt0G)
is_dir(/usr/bin/)
file_exists(/usr/bin/gm)
file_exists(/usr/bin/combine)
file_exists(/usr/bin/composite)
is_executable(/usr/bin/composite)
is_dir(/usr/bin/)
file_exists(/usr/bin/gm)
tempnam(/home/ryanmc/RyansWorldGalleryImages/tmp/, imgk_)
Executing: (nice "/usr/bin/composite" "-geometry" "+0+0"
"/home/ryanmc/public_html/ryansworld/gallery/modules/imagemagick/data/test.jpg"
"/home/ryanmc/public_html/ryansworld/gallery/modules/imagemagick/data/test.gif"
"gif:/home/ryanmc/RyansWorldGalleryImages/tmp/imgk_cblPbg" )
2>"/tmp/g2dbgRTgzC3"
file_exists(/tmp/g2dbgRTgzC3)
filesize(/tmp/g2dbgRTgzC3)
fopen(/tmp/g2dbgRTgzC3, r, 0)
feof(Resource id #197)
fgets(Resource id #197, 4096)
feof(Resource id #197)
fgets(Resource id #197, 4096)
feof(Resource id #197)
fclose(Resource id #197)
unlink(/tmp/g2dbgRTgzC3)
Regular Output:
Error Output:
composite: unable to open image
`/home/ryanmc/RyansWorldGalleryImages/tmp/imgk_cblPbg': No such file or
directory.
Status: 1 (expected 0)
unlink(/home/ryanmc/RyansWorldGalleryImages/tmp/imgk_cblPbg)
chdir(/home/ryanmc/public_html/ryansworld)
Posts: 2
Which php.ini?
My hoster says ImageMagick is in the /usr/bin/php_safemode/ directory. If I disable the check during configuration it works fine.
However he did'nt say where to disablle the check.
Regards
Chilli