LogoفارسیFA

Customizing Workflow in DirectAdmin: Hooks, Feature Sets, Command Control, and Plugin Management

This article provides a complete overview of how to customize and extend DirectAdmin’s workflow. It covers pre/post hook scripts, command-level access control, feature sets, plugin permissions, and package-based plugin management. These tools allow administrators to tailor DirectAdmin’s behavior, restrict or expand user capabilities, and integrate custom automation safely and efficiently.

DirectAdmin customizationfeature setspre/post scripts

~3 min read · Updated Mar 1, 2026

1. Overview of DirectAdmin Workflow Customization


DirectAdmin includes several mechanisms that allow administrators to modify how the control panel behaves, what users can access, and how system tasks are executed. These customization layers include:


  • Pre/Post hook scripts
  • Command allow/deny rules
  • Feature Sets
  • Plugins and plugin-level permissions

---

2. Pre/Post Shell Scripts (Hooks)


Pre/Post scripts are powerful hooks that allow you to execute custom code before or after DirectAdmin performs a task. Examples include:


  • user_create_pre.sh — runs before a user is created
  • user_create_post.sh — runs after a user is created
  • Similar hooks exist for domains, DNS, email, packages, and more

Key behavior:


  • Pre-scripts can stop the operation by exiting with a non zero code
  • Post-scripts run after the operation completes and can extend functionality

Lists of available hooks:


  • All *_post.sh scripts
  • All *_pre.sh scripts

DirectAdmin’s KnowledgeBase also includes many examples for both types.


---

3. Command Allow/Deny Rules


Each DirectAdmin user can have their own commands.allow and commands.deny files. These files define which internal DirectAdmin commands the user is allowed or denied from executing.


This method is simpler than scripting because:


  • No scripting is required
  • You only list command names
  • It works per-user

Additionally, the Login Keys feature (introduced in DA 1.40.2) allows:


  • Multiple passwords per account
  • Command restrictions
  • IP restrictions
  • Expiration and usage limits

---

4. Feature Sets


Feature Sets provide a modular way to control which DirectAdmin commands a user or package can access. Unlike packages, which control limits, Feature Sets control functionality.


4.1 How Feature Sets Work


Each user or package can include:


feature_sets=view_domain:tickets:dns_only

Rules:


  • Values are colon-separated
  • Invalid or missing sets are ignored
  • Leaving the value blank removes the variable

4.2 Feature Set Storage


Default sets:


/usr/local/directadmin/data/templates/feature_sets/

Custom sets:


/usr/local/directadmin/data/templates/custom/feature_sets/

4.3 Default Feature Sets


  • dns_only — DNS management only
  • email_only — Email-related features
  • tickets — Message/Ticket system
  • view_domain — Basic domain overview and password changes
  • core_functions — Combination of view_domain + tickets

---

5. Creating a Custom Feature Set


5.1 Create the directory


mkdir -p /usr/local/directadmin/data/templates/custom/feature_sets
cd /usr/local/directadmin/data/templates/feature_sets/
cp -rp core_functions ../custom/feature_sets/example_set

5.2 Name the feature set


/usr/local/directadmin/data/templates/feature_sets/example_set/lang/en.name.txt

5.3 Add allowed commands


Edit:


example_set/commands.allow

To discover command names:


  • Use DirectAdmin debug mode
  • Use API:

curl -s $(da api-url --user=[DA_USER])/api/session | jq '.allowedCommands'

5.4 Assign the feature set


To a user:


Admin Level → Show All Users → Modify → Feature Sets

To a package:


Admin Level → Manage User Packages → Modify/Create → Feature Sets

---

6. Plugins


Plugins allow you to add custom functionality to DirectAdmin. They run with the user’s permissions, making them safe by default.


Important: Plugins can run as root only if you create a setuid binary (chmod 4755), which is dangerous unless coded securely.


---

7. Plugin Permissions in Packages


Plugins can be enabled or disabled per user or per package.


7.1 Storage locations


User package:


/usr/local/directadmin/data/users/USERNAME/packages/PACKAGE_NAME

User configuration:


/usr/local/directadmin/data/users/USERNAME/user.conf

7.2 Allowing or denying plugins


Allow only specific plugins:


plugins_allow=plug1:plug2

Deny specific plugins:


plugins_deny=plug3:plug4

7.3 Logic rules


  • If neither variable exists → all plugins allowed
  • If plugins_allow exists → only listed plugins allowed
  • If plugins_deny exists → listed plugins denied
  • If both exist → plugins_allow overrides everything

7.4 Clearing plugin lists


plugins_allow=[clear]
plugins_deny=[clear]

Note: Setting plugins_allow= (empty) blocks all plugins.


Written & researched by Dr. Shahin Siami

Related Articles

Email Client Configuration & Dovecot Quota/Monitoring Guide for DirectAdmin Users

This guide explains how to configure popular email clients (iPhone Mail, Thunderbird, Gmail POP/SMTP), enable Dovecot LMTP quota warnings, and check the last login time for all email accounts on a DirectAdmin server. It includes step by step instructions, recommended IMAP/SMTP settings, and useful administrative scripts.

Continue

Troubleshooting Dovecot in DirectAdmin – Fixing IMAP Errors, Authentication Issues, and SSL Certificate Checks

Dovecot is the IMAP/POP3 server used by DirectAdmin. Sometimes users encounter errors such as “Connection dropped by IMAP server” or “unknown user” during authentication. This guide explains how to fix corrupted Dovecot indexes, understand authentication logs, hide unnecessary warnings, and manually inspect SSL certificates on IMAP ports 143 and 993.

Continue

DNS Troubleshooting in DirectAdmin – When named is Running but Domains Do Not Resolve

Sometimes the named (BIND) service runs normally, yet DNS queries fail or domains do not resolve from outside. This guide provides a complete troubleshooting workflow for checking named listeners, firewall rules, named.conf configuration, DNS propagation issues, subdomain problems, resolv.conf errors, and common Apache/Nginx misconfigurations.

Continue

Managing DNS Records in DirectAdmin – Complete Practical Guide for Administrators

DirectAdmin provides a powerful DNS management system that allows administrators to control TTL values, create SRV records, enable DNSSEC, manage subdomain delegation, automate TLSA records, and perform mass DNS updates. This guide explains all essential DNS operations in DirectAdmin with real-world examples and best practices.

Continue

DNS and Nameservers in DirectAdmin – Complete, Practical, and Professional Guide

DNS is the backbone of the internet, responsible for translating domain names into IP addresses. DirectAdmin allows you to create private nameservers (ns1/ns2), manage DNS zones, configure DNS clustering, use external DNS, and troubleshoot common issues. This guide provides a complete, clear, and practical explanation of DNS concepts and their implementation in DirectAdmin.

Continue

CustomBuild in DirectAdmin – Complete Guide to Installation, Updates, Configuration, and Advanced Customization

CustomBuild is DirectAdmin’s primary software management system. It installs, updates, configures, and rebuilds essential services such as Apache, Nginx, PHP, MariaDB/MySQL, Exim, Dovecot, FTP servers, and more. Because most components are compiled from source, CustomBuild offers exceptional flexibility, fast access to new versions, and optimized performance.

Continue
Previous ArticleNext Article