In OpenLiteSpeed versions before 1.4, virtual host configuration files were stored by default in separated directories under <code>/usr/local/lsws/</code>. These directories were considered the virtual host root and often had a separate <code>conf/</code> directory within them. This could cause problems with the WebAdmin console if the WebAdmin user (<code>lsadm</code>) did not have access to these directories. Giving the WebAdmin console access to these directories, though, is can be a small security hole.

To fix this, starting with OpenLiteSpeed 1.4, we have moved the default location for virtual host configuration files to directories under <code>/usr/local/lsws/conf/vhosts</code>. For example, the main configuration file for a virtual host named "Freddy" should now be placed in <code>/usr/local/lsws/conf/vhosts/Freddy/vhost.conf</code>. Other configuration files, such as passwords, groups, and realms should also be placed here. Scripts, content, and other files are still found in the virtual host roots under <code>/usr/local/lsws/</code>. We recommend that all users use this structure.