ISPConfig 3 issueshttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues2018-12-15T18:15:33Zhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/1677Add strengthmeter in folder protection2018-12-15T18:15:33ZpititisAdd strengthmeter in folder protectionPlease add strengthmeter in folder protection form
CheersPlease add strengthmeter in folder protection form
Cheers3.0.5https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/445Add support for APS (Application Packaging Standard)2012-06-07T16:53:23ZTill BrehmAdd support for APS (Application Packaging Standard)http://www.apsstandard.org/http://www.apsstandard.org/3.0.5https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/1537Add support for php_fpm2018-12-15T18:15:40ZAlberto ZuinAdd support for php_fpmphp_fpm is a new technology to run php application in a way similar to FastCGI/SuEXEC, but more efficient and fast.
In php_fpm daemon we can configure some "pools" with different setup (for example the user) to customize php functionali...php_fpm is a new technology to run php application in a way similar to FastCGI/SuEXEC, but more efficient and fast.
In php_fpm daemon we can configure some "pools" with different setup (for example the user) to customize php functionalities like suPHP.3.0.5https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/2319Add support for SSL bundle certificates (SSLCACertificateFile) in ispconfig a...2018-12-15T18:15:10ZTill BrehmAdd support for SSL bundle certificates (SSLCACertificateFile) in ispconfig apache vhostAdd support for SSL bundle certificates (SSLCACertificateFile) in ispconfig apache vhost. The bundle certificate is recognized in this path:
/usr/local/ispconfig/interface/ssl/ispserver.bundleAdd support for SSL bundle certificates (SSLCACertificateFile) in ispconfig apache vhost. The bundle certificate is recognized in this path:
/usr/local/ispconfig/interface/ssl/ispserver.bundle3.0.5https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/2095Add table permissions in multiserver systems for new backup table2017-11-10T15:24:13ZTill BrehmAdd table permissions in multiserver systems for new backup tablehttp://www.howtoforge.com/forums/showthread.php?t=58123http://www.howtoforge.com/forums/showthread.php?t=581233.0.5https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/1025Adding a tablesorter to client list etc.2012-03-05T07:55:39ZRaffael LuthigerAdding a tablesorter to client list etc.It would help a lot if the tables in the background could be sorted with a javascript plugin like e.g. http://tablesorter.com/docs/
Another benefit would be that it is visible after which column the data is currently sorted (which I c...It would help a lot if the tables in the background could be sorted with a javascript plugin like e.g. http://tablesorter.com/docs/
Another benefit would be that it is visible after which column the data is currently sorted (which I can't see at the moment.)
In one of my projects I use the tablesorter plugin along with the tableFilter plugin: http://www.picnet.com.au/picnet_table_filter.html
This allows to have full full filtering and sorting on the client side only.3.0.5https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/2349Adding chrooted cron jobs not work and freeze ispconfig job queue2017-11-10T15:23:55ZJan KopeckyAdding chrooted cron jobs not work and freeze ispconfig job queueAfter upgrade to ISPConfig 3.0.5 RC 1 form stable version on Debian 6 virtual server is not possible add new chrooted cron job. ISPConfig job for inserting cron job remains in queue and block any other changes which remains in queue too....After upgrade to ISPConfig 3.0.5 RC 1 form stable version on Debian 6 virtual server is not possible add new chrooted cron job. ISPConfig job for inserting cron job remains in queue and block any other changes which remains in queue too.
In /var/log/ispconfig/cron.log is:
mkdir: cannot create directory `/var/www/clients/client2/web1/var': File exists
mkdir: cannot create directory `/var/www/clients/client2/web1/var/run': File exists
PHP Fatal error: Call to a member function mkdir() on a non-object in /usr/local/ispconfig/server/plugins-available/cron_jailkit_plugin.inc.php on line 302
When I try manually run /usr/local/ispconfig/server/server.sh it is silently done without "finished" result.
Thare was no cron jobs at all before upgrade.3.0.5https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/1940Adding DNS support for allow-update2018-12-15T18:15:23ZHelioAdding DNS support for allow-updateI was looking for a way to add "allow-update { key xxx; };" to my named.conf.local.
How I haven't found any reference for the column "update_acl" of dns_soa, I've changed "bind_plugin.inc.php" to support that as follows:
At line 391,...I was looking for a way to add "allow-update { key xxx; };" to my named.conf.local.
How I haven't found any reference for the column "update_acl" of dns_soa, I've changed "bind_plugin.inc.php" to support that as follows:
At line 391, I added the column "update_acl" to the query
Added the following code after line 327:
if(trim($tmp['update_acl'])) {
$options .= " allow-update {".str_replace(',',';',$tmp['update_acl']).";};\n";
}
Perhaps, if you found this usefull, you can implement this in a better way.3.0.5https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/2054Additional addons can not populate $wb['top_menu_modulename']2018-12-15T18:15:17ZChristian FöllmannAdditional addons can not populate $wb['top_menu_modulename']For additional addons it is not possible to populate the lang_vars for the topmenu without changing core files.
top_menu_modulename needs to be added to interface/lib/lang/**.lng which does not survive an update.For additional addons it is not possible to populate the lang_vars for the topmenu without changing core files.
top_menu_modulename needs to be added to interface/lib/lang/**.lng which does not survive an update.3.0.5https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/224Additional fields into Client-->Address (Business number and Tax ID number)2012-05-16T00:49:19ZRadimAdditional fields into Client-->Address (Business number and Tax ID number)Please add new fields
into Form Client -> Address
Business number
and
Tax Identification NumberPlease add new fields
into Form Client -> Address
Business number
and
Tax Identification Number3.0.5https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/2107AddType text/html .rb to vhost.conf.master2018-12-15T18:15:17ZMKAddType text/html .rb to vhost.conf.masterI just discovered a blog suggesting to add the AddType declarations to the apache vhost rather than hacking the mime.types file of the system.
Seems very logical to me:
So instead of describing within the tutorials how to edit the ...I just discovered a blog suggesting to add the AddType declarations to the apache vhost rather than hacking the mime.types file of the system.
Seems very logical to me:
So instead of describing within the tutorials how to edit the mime.types, you should add this:
AddType text/html .rb
(AddType text/html .rbx)
to the mod_ruby part of the vhost.conf.master3.0.5https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/2339admin module selectable as startmodule for clients2017-11-10T15:23:55ZTill Brehmadmin module selectable as startmodule for clientsCreate Client.
Log in as client.
Select Tools > Interface
The Start module can select all admin options. They don't have access to
them as far as I can tell, but the client screen flickers with another
control panel screen inside of...Create Client.
Log in as client.
Select Tools > Interface
The Start module can select all admin options. They don't have access to
them as far as I can tell, but the client screen flickers with another
control panel screen inside of it when the client re-logs in.3.0.5https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/2403Alias Domains: wrong document root and open_basedir2017-11-10T15:23:50ZFalko Timmef.timme@timmehosting.deAlias Domains: wrong document root and open_basedirAlias domains have wrong document roots and open_basedirs in the database. They always belong to client0 (e.g. /var/www/clients/client0/web39), although the alias domain belongs to another client. The problem seems to be in lib/plugins/s...Alias domains have wrong document roots and open_basedirs in the database. They always belong to client0 (e.g. /var/www/clients/client0/web39), although the alias domain belongs to another client. The problem seems to be in lib/plugins/sites_web_domain_plugin.inc.php.
$page_form->dataRecord has no element "client_group_id", that's why the client Id is always 0:
Array
(
[domain] => er.de
[parent_domain_id] => 7
[redirect_type] =>
[redirect_path] =>
[subdomain] => www
[seo_redirect] =>
[active] => y
[id] =>
[next_tab] =>
[phpsessid] => 4iliu231a9jr6revq8sabckm47
[type] => alias
[server_id] => 1
)3.0.5https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/106Allow user (not client) to change mailbox settings2012-07-09T16:07:24ZSeberITAllow user (not client) to change mailbox settingsIt would be very usefull is a mailbox owner (so not the client, but the one actually using the mailbox) can login somewhere to change mailbox settings like filters/password (and maybe virus/spam handling). If I remember well, this option...It would be very usefull is a mailbox owner (so not the client, but the one actually using the mailbox) can login somewhere to change mailbox settings like filters/password (and maybe virus/spam handling). If I remember well, this option is available in ISPconfig 2.3.0.5https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/2175Allow wildcard subdomain creation on limit_wildcard = y2018-12-15T18:15:14ZMarius BurkardAllow wildcard subdomain creation on limit_wildcard = yIf a client has the limit_wildcard set to y he should be able to create a subdomain with the host "*".If a client has the limit_wildcard set to y he should be able to create a subdomain with the host "*".3.0.5Marius BurkardMarius Burkardhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/2423apache cant read .htpasswd_stats2017-11-10T15:23:48ZThomasapache cant read .htpasswd_statsHi tryd today to open my /stats and could not log into the folder.
In logfile I only got:
user admin: authentication failure for "/stats/": Password Mismatch
I figured out, that the problem relies someware on the permissions is...Hi tryd today to open my /stats and could not log into the folder.
In logfile I only got:
user admin: authentication failure for "/stats/": Password Mismatch
I figured out, that the problem relies someware on the permissions ispconfig set.
When I copy the .htpasswd_stats to /tmp and change the path in the .htaccess file I can log into the page.
Will it not be better to configure a speciel path for all htpasswd files (for all websites) and do the setup in the apache vhost file with the directory directive for more security.
<--
Make sure that the AuthUserFile is stored outside the document tree of the web-server. Do not put it in the directory that it protects. Otherwise, clients may be able to download the AuthUserFile.
--->
https://httpd.apache.org/docs/2.2/mod/mod_authn_file.html
Version I use is 3.0.5 RC23.0.5https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/2119Apache log files are in directory owned by web user2017-06-25T10:54:05ZMarc SchützApache log files are in directory owned by web userThe apache log files are placed in a directory in /var/log/ispconfig/httpd whose owner/group is set to web*:client*. Although the logfiles themselves are owned by root:root (well, except error.log, which belongs to the web user, too), th...The apache log files are placed in a directory in /var/log/ispconfig/httpd whose owner/group is set to web*:client*. Although the logfiles themselves are owned by root:root (well, except error.log, which belongs to the web user, too), they can still be deleted and replaced by the user. This might be undesirable from an auditing point of view.
This also opens up the system to various kinds of symlink attacks, as the log files are written to by vlogger (run as root). vlogger _does_ check for symlinks, but its reaction to finding one is simply to die, which makes Apache restart it. This could potentially lead to a high load. More importantly, the check is done in a non-atomic manner, making it circumventable with some effort.
AFAICS, the directory ownership as well as the ownership of error.log can simply be changed to root:root, without breaking any important functionality, thereby evading the above-mentioned problems easily.3.0.5Till BrehmTill Brehmhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/2357Apache Logs of primary server host is not being rotated2017-11-10T15:23:55ZTorben NehmerApache Logs of primary server host is not being rotatedI have an ISPConfig server running at isp.mydomain.com. The log files for this webhost are logged at /var/log/ispconfig/httpd/isp.mydomain.com/access*. In my case there is no error log at this location, but I guess that this is a coincid...I have an ISPConfig server running at isp.mydomain.com. The log files for this webhost are logged at /var/log/ispconfig/httpd/isp.mydomain.com/access*. In my case there is no error log at this location, but I guess that this is a coincidence. The cron_daily.php script does not rotate these files. I had months worth of logs lying around uncompressed with a totoal of over 200 MB data. The logfiles aren't that small since alone the watchdoges ping this host at a regular interval.
This special host should be added to the daily rotation because usage of vlogger makes it hard to use the standard logrotate to fix this locally.3.0.5https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/2218apache ssl certificate issue on multi server environment2017-11-10T15:24:05Zdanielapache ssl certificate issue on multi server environmentHello team,
the following scenario:
- Conf1 server: ISPConfig3 to manage servers
- Web1 server: MAIN webserver
- Web2 server: BACKUP weberver (automated rsync)
- ... various other servers
Note: Web2 is set up as an mirror cli...Hello team,
the following scenario:
- Conf1 server: ISPConfig3 to manage servers
- Web1 server: MAIN webserver
- Web2 server: BACKUP weberver (automated rsync)
- ... various other servers
Note: Web2 is set up as an mirror client
I go to Web Site -> Domains -> I choose the desired domain and click me an SSL certificate "create" (self signed certificate)
ISPConfig3 subsequently generated by random generator … different keys on both machines
when I look at the certificate (in the ispconfig interface), we absolutely do not determine whether SSL Request / SSL Certificate appears from Web1 or Web2 ???
so I take the SSL Request, go to my CA and let sign this thing … then I add it via ISPConfig web-interface again "Save" button … shortly ...
i get an email: "Webserver1 is down" …
I "cat" the error.log in / var / www / domain.tld / log on Web1:
16 01:56:04 2012] [error] Unable to configure RSA server private key
[Tue Oct 16 01:56:04 2012] [error] SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
[Tue Oct 16 01:56:08 2012] [warn] RSA server certificate CommonName (CN) `www.domain.tld' does NOT match server name!?
[Tue Oct 16 01:56:08 2012] [error] Unable to configure RSA server private key
[Tue Oct 16 01:56:08 2012] [error] SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
[Tue Oct 16 02:03:31 2012] [warn] RSA server certificate CommonName (CN) `www.domain.tld' does NOT match server name!?
OK, all right, Web1 is down, however … , Web2 works … so i decided to copy the keys from Web2 to Web1 over ssh and restart the apache2 service ...
It seems so that: … If ISPConfig3 - 3.0.4 works only as config server … it pops up randomly (from the managed web servers) the SSL certificates in the interface, although Web2 ... clearly runs as slave / in client mirror mode
the generation of the different random keys at the web server can not be avoided, … but ISPConfig 3 should clearly only take the information from the primary server, i think so ...
a customer could so easily with an malformed SSL Cert. Config paralyze the machine …3.0.5https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/2274Apache2 PHP-FPM Error 403 "forbidden" - vhost.conf.master2017-11-10T15:24:00ZChristian SchachApache2 PHP-FPM Error 403 "forbidden" - vhost.conf.masterHi,
I am currently using 3.0.5 beta 1 (cannot be selected in Bugtracker).
In the template-file vhost.conf.master is a small mistake which leads to an forbidden-error when trying to open an php-fpm enabled website using the apache s...Hi,
I am currently using 3.0.5 beta 1 (cannot be selected in Bugtracker).
In the template-file vhost.conf.master is a small mistake which leads to an forbidden-error when trying to open an php-fpm enabled website using the apache server.
The line 237 which us currently "<Directory /usr/lib/cgi-bin>" has to be changed to "<Directory {tmpl_var name='cgi_starter_path'}>" to fix that.
So the complete block should now like like that:
<tmpl_if name='php' op='==' value='php-fpm'>
<IfModule mod_fastcgi.c>
<Directory {tmpl_var name='cgi_starter_path'}>
Order allow,deny
Allow from all
</Directory>3.0.5