ISPConfig 3 issueshttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues2020-02-26T22:43:08Zhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4747Database Quota "-1 MB"2020-02-26T22:43:08ZIaina RandrianarivonyDatabase Quota "-1 MB"Hello,
After upgrade, all modifications or add new database, the quota of database show -1 MB!
![Capture](/uploads/2f19f866d807c7f7d3cea781450b6a54/Capture.PNG)
Best regards,
Iaina RandrianarivonyHello,
After upgrade, all modifications or add new database, the quota of database show -1 MB!
![Capture](/uploads/2f19f866d807c7f7d3cea781450b6a54/Capture.PNG)
Best regards,
Iaina Randrianarivonyhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4748On login modal window 'loading' for about a minute calling datalogstatus.php2019-08-01T10:48:03ZSergiOn login modal window 'loading' for about a minute calling datalogstatus.phpHello,
on a ispconfig 3.1.2, when logging a modal windows appears to be doing something for about a minute before being able to start working with the panel.
It does it only once, just after entering user and password and hitting the bu...Hello,
on a ispconfig 3.1.2, when logging a modal windows appears to be doing something for about a minute before being able to start working with the panel.
It does it only once, just after entering user and password and hitting the button.
I can see the modal is a jquery calling every few seconds datalogstatus.php, but don't know what it is that takes so long.
How can I debug it?https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4749aliasdomain and subdomain vhost permissions.2020-03-01T21:32:46Zleealiasdomain and subdomain vhost permissions.ispconfig is not setting the correct folder permissions for the document root for an aliasdomain vhost.
that looking at /usr/local/ispconfig/server/plugings-available/apache2_plugin.inc.php
it quite specifically sets the document root /w...ispconfig is not setting the correct folder permissions for the document root for an aliasdomain vhost.
that looking at /usr/local/ispconfig/server/plugings-available/apache2_plugin.inc.php
it quite specifically sets the document root /web folder to 711,
for a vhostsubdomain or a vhostalias, it sets to document root folder to 710.
at the moment if i create a new vhost aliasdomain i have to remember to chmod the folder to 711, and if i resync the sites on a server, i have to remember to chmod the root folder to 711 again for every aliasdomain vhost. otherwise visitors just get a 'you don't have permission to access / on this server' message.
currently using ispconfig 3.1.3https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4750Php7.1 Warning: Declaration of db::query($sQuery = '') should be compatible w...2017-10-19T16:38:22ZGhost UserPhp7.1 Warning: Declaration of db::query($sQuery = '') should be compatible with mysqli::query($query, $resultmode = NULL)```
Php7.1 Warning: Declaration of db::query($sQuery = '') should be compatible with mysqli::query($query, $resultmode = NULL) in /usr/local/ispconfig/server/lib/classes/db_mysql.inc.php
```
The above error has been reported at least twi...```
Php7.1 Warning: Declaration of db::query($sQuery = '') should be compatible with mysqli::query($query, $resultmode = NULL) in /usr/local/ispconfig/server/lib/classes/db_mysql.inc.php
```
The above error has been reported at least twice for php7.1 in the forum ([here](https://www.howtoforge.com/community/threads/ispconfig-php-fpm-not-working.77019/) and [there](https://www.howtoforge.com/community/threads/upgrade-to-latest-relase-stopped-everything-working.76937/)).
They are both using php7.1 for ISPConfig "unknowingly" when the error was found but those who are testing php7.1 for ISPConfig may have already noticed this earlier.
I am testing a fix since I am also testing ISPConfig with php7.1 which is basically replacing all occurrences (11 altogether) of ($sQuery ='') to ($sQuery, $resultmode = MYSQLI_STORE_RESULT) in the said db_mysql.inc.php file. So far it manages to resolve the above issue but I am not so sure whether it won't cause others.
The modified file of [db_mysql.inc.php](/uploads/67e3164d97e7b1f17fb3a03d336cab32/db_mysql.inc.php) is attached for reference and testing.
Do try and report as well.
Signed Ahmad Rasyid Ismail "ahrasis" ahrasis-at-gmail.com3.1.8https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4752PHP Deprecated: Methods with the same name as their class will not be constr...2017-08-07T05:15:03ZMarius BurkardPHP Deprecated: Methods with the same name as their class will not be constructors in a future version of PHPPHP Deprecated: Methods with the same name as their class will not be constructors in a future version of PHP; db_result has a deprecated constructor in /usr/local/ispconfig/interface/lib/classes/db_mysql.inc.phpPHP Deprecated: Methods with the same name as their class will not be constructors in a future version of PHP; db_result has a deprecated constructor in /usr/local/ispconfig/interface/lib/classes/db_mysql.inc.php3.1.7Marius BurkardMarius Burkardhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4753DNS Import function: NS records not always imported2020-06-09T17:17:04ZTill BrehmDNS Import function: NS records not always importedhttps://www.howtoforge.com/community/threads/import-dns-zone-file-function-doesnt-work-correctly.77044/https://www.howtoforge.com/community/threads/import-dns-zone-file-function-doesnt-work-correctly.77044/3.2https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4754Add support for ASP.NET2021-12-02T11:48:02ZMartinAdd support for ASP.NETIt would be nice if ispconfig could support ASP.NET.
### Install .NET Core
https://www.microsoft.com/net/core#linuxubuntu
### ASP.NET Core on Linux with Nginx
https://docs.microsoft.com/en-us/aspnet/core/publishing/linuxproduction
###...It would be nice if ispconfig could support ASP.NET.
### Install .NET Core
https://www.microsoft.com/net/core#linuxubuntu
### ASP.NET Core on Linux with Nginx
https://docs.microsoft.com/en-us/aspnet/core/publishing/linuxproduction
### ASP.NET Core on Linux with Apache
https://docs.microsoft.com/en-us/aspnet/core/publishing/apache-proxyhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4755Error: mkdir failed: /usr/local/ispconfig/interface/acme/.well-known/acme-cha...2017-08-07T14:39:21ZTill BrehmError: mkdir failed: /usr/local/ispconfig/interface/acme/.well-known/acme-challenge/This error message appears in the ISPConfig log when a LE SSL cert is created.This error message appears in the ISPConfig log when a LE SSL cert is created.3.1.7https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4756ISPconfig 3.1.6: Apache ispconfig.conf template server/conf/apache_ispconfig....2020-09-09T18:34:17ZJustinISPconfig 3.1.6: Apache ispconfig.conf template server/conf/apache_ispconfig.conf.master contains hardcoded itk user in lets encrypt sectionI assume this should be a variable, reading the values from System->Server Config -> Web -> "Apache user" and "Apache group"
`
Alias /.well-known/acme-challenge /usr/local/ispconfig/interface/acme/.well-known/acme-challenge
<Directory /...I assume this should be a variable, reading the values from System->Server Config -> Web -> "Apache user" and "Apache group"
`
Alias /.well-known/acme-challenge /usr/local/ispconfig/interface/acme/.well-known/acme-challenge
<Directory /usr/local/ispconfig/interface/acme/.well-known/acme-challenge>
<tmpl_if name='apache_version' op='>' value='2.2' format='version'>
Require all granted
<tmpl_else>
Order allow,deny
Allow from all
</tmpl_if>
<IfModule mpm_itk_module>
AssignUserId www-data www-data
</IfModule>
</Directory>
`3.2https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4757Field default_dnsserver is missed into client limits panel2020-10-03T19:25:50ZDenis LepesqueurField default_dnsserver is missed into client limits panelCannot set default_dnsserver during client update, field is missed into limits panel.
Need to update form/client.tform.php and template/client_edit_limits.php to do the trick.Cannot set default_dnsserver during client update, field is missed into limits panel.
Need to update form/client.tform.php and template/client_edit_limits.php to do the trick.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4758Feature Request: Docroot frei Wählbar2017-08-17T20:42:37ZPatrick OmlandFeature Request: Docroot frei WählbarMan sollte, wie bei Subdomains auch bei Domains das Docroot frei einstellen können, dies ist z.B. bei Frameworks ala Symfony PraktischMan sollte, wie bei Subdomains auch bei Domains das Docroot frei einstellen können, dies ist z.B. bei Frameworks ala Symfony Praktischhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4760Parent domain not reset on databases when it is deleted2017-11-22T22:09:54ZMarius BurkardParent domain not reset on databases when it is deletedparent_domain_id in web_database table not set to zero when corresponding web is deleted.parent_domain_id in web_database table not set to zero when corresponding web is deleted.3.1.7Marius BurkardMarius Burkardhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3450Set default password hashing algorithm to SHA5122020-12-13T12:06:42ZRudolf PinterSet default password hashing algorithm to SHA512If there is not a good reason to have MD5 as password hashing function it would be nice to set default password hashing algorithm to SHA512. It this is not possible make it at least possible to switch to it from config file.
I have a pa...If there is not a good reason to have MD5 as password hashing function it would be nice to set default password hashing algorithm to SHA512. It this is not possible make it at least possible to switch to it from config file.
I have a patch file which makes this possible. This sample is made with default number of rounds, but it's easy to add rounds parameter and make it much more secure.
1. Step - Update SQL tables client and sys_user:
ALTER TABLE `client` CHANGE `password` `password` VARCHAR(128) CHARACTER SET utf8 COLLATE utf8_general_ci NULL DEFAULT NULL;
ALTER TABLE `sys_user` CHANGE `passwort` `passwort` VARCHAR(128) CHARACTER SET utf8 COLLATE utf8_general_ci NOT NULL DEFAULT '';
2. This patch is made for 3.0.5.4p5:
```patch
diff -rupNB ispconfig/interface/lib/classes/auth.inc.php ispconfig-sha512/interface/lib/classes/auth.inc.php
--- ispconfig/interface/lib/classes/auth.inc.php 2014-11-16 01:42:20.000000000 +0000
+++ ispconfig-sha512/interface/lib/classes/auth.inc.php 2015-01-03 21:20:48.060287269 +0000
@@ -163,9 +163,9 @@ class auth {
}
public function crypt_password($cleartext_password) {
- $salt="$1$";
+ $salt="$6$";
$base64_alphabet='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
- for ($n=0;$n<8;$n++) {
+ for ($n=0;$n<12;$n++) {
$salt.=$base64_alphabet[mt_rand(0, 63)];
}
$salt.="$";
diff -rupNB ispconfig/interface/web/admin/users_edit.php ispconfig-sha512/interface/web/admin/users_edit.php
--- ispconfig/interface/web/admin/users_edit.php 2014-11-16 01:42:20.000000000 +0000
+++ ispconfig-sha512/interface/web/admin/users_edit.php 2015-01-03 21:20:57.223502200 +0000
@@ -113,9 +113,9 @@ class page_action extends tform_actions
// password changed
if(isset($conf['demo_mode']) && $conf['demo_mode'] != true && isset($this->dataRecord["passwort"]) && $this->dataRecord["passwort"] != '') {
$password = $app->db->quote($this->dataRecord["passwort"]);
- $salt="$1$";
+ $salt="$6$";
$base64_alphabet='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
- for ($n=0;$n<8;$n++) {
+ for ($n=0;$n<12;$n++) {
$salt.=$base64_alphabet[mt_rand(0, 63)];
}
$salt.="$";
diff -rupNB ispconfig/interface/web/client/client_edit.php ispconfig-sha512/interface/web/client/client_edit.php
--- ispconfig/interface/web/client/client_edit.php 2014-11-16 01:42:20.000000000 +0000
+++ ispconfig-sha512/interface/web/client/client_edit.php 2015-01-03 21:21:06.224713334 +0000
@@ -402,9 +402,9 @@ class page_action extends tform_actions
// password changed
if(isset($conf['demo_mode']) && $conf['demo_mode'] != true && isset($this->dataRecord["password"]) && $this->dataRecord["password"] != '') {
$password = $app->db->quote($this->dataRecord["password"]);
- $salt="$1$";
+ $salt="$6$";
$base64_alphabet='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
- for ($n=0;$n<8;$n++) {
+ for ($n=0;$n<12;$n++) {
$salt.=$base64_alphabet[mt_rand(0, 63)];
}
$salt.="$";
diff -rupNB ispconfig/interface/web/client/reseller_edit.php ispconfig-sha512/interface/web/client/reseller_edit.php
--- ispconfig/interface/web/client/reseller_edit.php 2014-11-16 01:42:20.000000000 +0000
+++ ispconfig-sha512/interface/web/client/reseller_edit.php 2015-01-03 21:21:21.999083346 +0000
@@ -219,9 +219,9 @@ class page_action extends tform_actions
$active = 1;
$language = $app->db->quote($this->dataRecord["language"]);
- $salt="$1$";
+ $salt="$6$";
$base64_alphabet='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
- for ($n=0;$n<8;$n++) {
+ for ($n=0;$n<12;$n++) {
$salt.=$base64_alphabet[mt_rand(0, 63)];
}
$salt.="$";
@@ -335,9 +335,9 @@ class page_action extends tform_actions
if(isset($conf['demo_mode']) && $conf['demo_mode'] != true && isset($this->dataRecord["password"]) && $this->dataRecord["password"] != '') {
$password = $app->db->quote($this->dataRecord["password"]);
$client_id = $this->id;
- $salt="$1$";
+ $salt="$6$";
$base64_alphabet='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
- for ($n=0;$n<8;$n++) {
+ for ($n=0;$n<12;$n++) {
$salt.=$base64_alphabet[mt_rand(0, 63)];
}
$salt.="$";
diff -rupNB ispconfig/interface/web/login/index.php ispconfig-sha512/interface/web/login/index.php
--- ispconfig/interface/web/login/index.php 2014-11-16 01:42:20.000000000 +0000
+++ ispconfig-sha512/interface/web/login/index.php 2015-01-03 22:10:53.058352035 +0000
@@ -165,7 +165,15 @@ class login_index {
$user = false;
if($mailuser) {
$saved_password = stripslashes($mailuser['password']);
- $salt = '$1$'.substr($saved_password, 3, 8).'$';
+// $salt = '$1$'.substr($saved_password, 3, 8).'$';
+ if(substr($saved_password, 0, 3) == '$1$') {
+ //* The password is crypt-md5 encrypted
+ $salt = '$1$'.substr($saved_password, 3, 8).'$';
+ } elseif(substr($saved_password, 0, 3) == '$6$') {
+ //* The password is crypt-sha512 encrypted
+ $salt = '$6$'.substr($saved_password, 3, 12).'$';
+ }
+
//* Check if mailuser password is correct
if(crypt(stripslashes($passwort), $salt) == $saved_password) {
//* we build a fake user here which has access to the mailuser module only and userid 0
@@ -203,6 +211,13 @@ class login_index {
} elseif(substr($saved_password, 0, 3) == '$5$') {
//* The password is crypt-sha256 encrypted
$salt = '$5$'.substr($saved_password, 3, 16).'$';
+// This is probably broken line. It should be: $salt = '$5$'.substr($saved_password, 3, 12).'$';
+ if(crypt(stripslashes($passwort), $salt) != $saved_password) {
+ $user = false;
+ }
+ } elseif(substr($saved_password, 0, 3) == '$6$') {
+ //* The password is crypt-sha512 encrypted
+ $salt = '$6$'.substr($saved_password, 3, 12).'$';
if(crypt(stripslashes($passwort), $salt) != $saved_password) {
$user = false;
```https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/2753Client data migration in multiserver enviorment2020-01-28T21:31:50ZWojtekClient data migration in multiserver enviormentit would be great if there was a function of the migration client with all data and settings between servers,
eg if one of the web server is under heavy load could move some of the websites to another server.
If you are working in a cl...it would be great if there was a function of the migration client with all data and settings between servers,
eg if one of the web server is under heavy load could move some of the websites to another server.
If you are working in a cluster environment it was to a great option.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/819MULTIPLE DELETION ON MONITOR/LOG ISPCONFIG2020-08-18T19:53:47ZStefano Brescia-TDGroup SPAMULTIPLE DELETION ON MONITOR/LOG ISPCONFIGI'D LIKE TO EXECUTE A MULTIPLE DELETION OF WARNINGS,ERRORS AND DEBUGS ON MONITOR/LOG ISPCONFIG.
THANKSI'D LIKE TO EXECUTE A MULTIPLE DELETION OF WARNINGS,ERRORS AND DEBUGS ON MONITOR/LOG ISPCONFIG.
THANKShttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/467Make more default values configurable to achieve less error prone operation2020-04-04T17:52:12ZViktorMake more default values configurable to achieve less error prone operationWhen adding databases, I always have to select the right server and UTF-8 as the encoding. It is rather error prone this way. There are many other places where a configurable default would be useful. The default should be 'en' for the la...When adding databases, I always have to select the right server and UTF-8 as the encoding. It is rather error prone this way. There are many other places where a configurable default would be useful. The default should be 'en' for the language, not 'nl' for example. (But I can overcome this using a client template in this specific case.)https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4608HTTPS redirect with ssl disabled2018-03-15T10:13:19ZCisilinoHTTPS redirect with ssl disabledhello ,
there's an issue in the SSL flow :
if the status of a website is changed ( from HTTPS to HTTP ) and the Redirect to HTTPS option is active , the redirect persists .
to solve this you must re-enable the ssl , and then remove ...hello ,
there's an issue in the SSL flow :
if the status of a website is changed ( from HTTPS to HTTP ) and the Redirect to HTTPS option is active , the redirect persists .
to solve this you must re-enable the ssl , and then remove the check from the "redirect to https"
i suggest to reset the redirect to HTTPS if the SSL option is disabled instead .https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4603APS installer use wrong db server2020-09-07T17:52:26ZLuisAPS installer use wrong db serverMy configuration is a multiserver setup, I followed the 3.1 manual.
The first server is only web and master db, the
"System -> Server Services" show the correct activated service for every server.
The "System -> Main Config" has "Def...My configuration is a multiserver setup, I followed the 3.1 manual.
The first server is only web and master db, the
"System -> Server Services" show the correct activated service for every server.
The "System -> Main Config" has "Default Webserver" and "Default Database Server" property configurated.
Even the client has the correct server's limit configurated.
But when a client uses APS to install a application, the APS install the databases on the first server (Only configurated to Web and the client don't has permission to used). The files are correct installed on the client webserver limited.
Configurations: Multi Debian 8 / ispconfig 3.1.2https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4602Cannot setup an XMPP domain.2020-09-08T16:14:03ZrubenzsoltCannot setup an XMPP domain.Hi, I cannot setup a XMPP domain, I completed the first tab, next the second TAB, but if I try to access the third MUC tab I receive an 1. domain_error_empty error message. It is a clean ISPConfig install 3.1.2 on Debian 8 x64
functio...Hi, I cannot setup a XMPP domain, I completed the first tab, next the second TAB, but if I try to access the third MUC tab I receive an 1. domain_error_empty error message. It is a clean ISPConfig install 3.1.2 on Debian 8 x64
function onSubmit() {
global $app, $conf;
/* check if the domain module is used - and check if the selected domain can be used! */
$app->uses('ini_parser,getconf');
$settings = $app->getconf->get_global_config('domains');
if ($settings['use_domain_module'] == 'n') {
if ($_SESSION["s"]["user"]["typ"] == 'admin' || $app->auth->has_clients($_SESSION['s']['user']['userid'])) {
$this->dataRecord['client_group_id'] = $app->tools_sites->getClientIdForDomain($this->dataRecord['domain']);
}
$domain_check = $app->tools_sites->checkDomainModuleDomain($this->dataRecord['domain']);
if(!$domain_check) {
// invalid domain selected
$app->tform->errorMessage .= $app->tform->lng("domain_error_empty")."<br />";
} else {
$this->dataRecord['domain'] = $domain_check;
}
}https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4556Unwanted DNS deletion2020-08-31T17:35:08ZCédricUnwanted DNS deletionHi all,
We found a critical issue after updating ISPConfig 3.0.5p9 to ISPConfig 3.1.2 related to the DNS zones (POWER DNS).
In our Ipsconfig setup we activated the domain restriction (System -> Main Config -> Domain)
With 3.0.5 this s...Hi all,
We found a critical issue after updating ISPConfig 3.0.5p9 to ISPConfig 3.1.2 related to the DNS zones (POWER DNS).
In our Ipsconfig setup we activated the domain restriction (System -> Main Config -> Domain)
With 3.0.5 this setting had no impact on the DNS zone (it was only effective in the mails and sites sections).
![305](/uploads/c1bbf7e4fa2e9109e2c6559067f990c4/305.png)
WIth 3.1 now we have the restriction (which is great)
![312](/uploads/d9bf797f6b388f473a402b5ee2fd7d05/312.png)
Not all domains added in DNS with ispconfig 3.0.5 were added in clients -> domains, given that no verifications were made with ispconfig 3.0.5. (exemple : a client that only has DNS services with us won’t have a domain registered in client -> domain because it was not necessary to add one).
So, after the update, we end up with mismatches between the client domains and domain inside DNS section.
If you edit a DNS zone (ex: change SOA) for a domain that is not inside client-> domains and you save it, **your DNS zone is automatically deleted without any warning!**
If the domain already existed in the client->domain section, the problem does not happen. (exemple: client in ISPConfig 3 has a DNS zone and web hosting, which requires a created domain in client -> domain).
This issue is can be avoided if you create a domain for the DNS zone for which no domain existed. After this step is done, the DNS zone will not be wiped out if you edit it.
Not funny when you delete a client zone ...
BYe
Cedhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4553Layout issue2020-09-30T11:28:01ZIanLayout issueHi,
As you can see in the attached image, the layout of the "https://" field is not correct.
This is no urgent bug, but it still would be great if it could get fixed.
![chrome_2017-02-24_20-41-55](/uploads/c0f90d2898578d87fa93ac36340df0...Hi,
As you can see in the attached image, the layout of the "https://" field is not correct.
This is no urgent bug, but it still would be great if it could get fixed.
![chrome_2017-02-24_20-41-55](/uploads/c0f90d2898578d87fa93ac36340df04c/chrome_2017-02-24_20-41-55.png)https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4550APS client database quota2020-04-04T19:43:07ZGilbertAPS client database quotaHello I set the size limit for database to 250mb but when I install wordpress with APS the database have no quota.
![Capture_d_écran_022217_102704_PM](/uploads/8a27d382701056166c7ccb4ee29ec490/Capture_d_écran_022217_102704_PM.jpg)
![Ca...Hello I set the size limit for database to 250mb but when I install wordpress with APS the database have no quota.
![Capture_d_écran_022217_102704_PM](/uploads/8a27d382701056166c7ccb4ee29ec490/Capture_d_écran_022217_102704_PM.jpg)
![Capture_d_écran_022217_102845_PM](/uploads/cfa7ee1a61a29fe953bac9e1dc908220/Capture_d_écran_022217_102845_PM.jpg)
Thanks for help!https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4535Let's Encrypt Permission denied error on acme challenge2020-08-31T07:46:13ZKoSLet's Encrypt Permission denied error on acme challengesee https://www.howtoforge.com/community/threads/lets-encrypt-permission-denied-error-on-acme-challenge.74939/
After upgrading from 3.1.1 to 3.1.2 the file permissions for the acme-challenge directory are set wrong so that there is no a...see https://www.howtoforge.com/community/threads/lets-encrypt-permission-denied-error-on-acme-challenge.74939/
After upgrading from 3.1.1 to 3.1.2 the file permissions for the acme-challenge directory are set wrong so that there is no access on them via apache for the let's encrypt domain authentication :-(
Manually chmod'ing helps, but will be probably reset on the next upgrade.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4533cron job doesn't delete when I delete a client2020-07-18T13:37:52ZTill Brehmcron job doesn't delete when I delete a clienthttps://www.howtoforge.com/community/threads/cron-job-doesnt-delete-when-i-delete-a-client.75596/https://www.howtoforge.com/community/threads/cron-job-doesnt-delete-when-i-delete-a-client.75596/https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4531Log spill / recursive error message when unable to connect to DB2020-09-20T20:26:48ZMattLog spill / recursive error message when unable to connect to DBISPConfig version is 3.1.2. There is an issue with recursive log messages leading to a huge `/var/log/ispconfig/cron.log` file. Here, 0.8 GiB accumulated in 30 minutes. Namely if for any reason establishing a database connection is impos...ISPConfig version is 3.1.2. There is an issue with recursive log messages leading to a huge `/var/log/ispconfig/cron.log` file. Here, 0.8 GiB accumulated in 30 minutes. Namely if for any reason establishing a database connection is impossible for a time, I get the following sequence of messages in that `cron.log`.
```
Thu Feb 16 02:49:21 CET 2017 PHP Warning: mysqli_ping() expects parameter 1 to be mysqli, null given in /usr/local/ispconfig/server/lib/classes/db_mysql.inc.php on line 198
Thu Feb 16 02:49:21 CET 2017 PHP Warning: mysqli_query() expects parameter 1 to be mysqli, null given in /usr/local/ispconfig/server/lib/classes/db_mysql.inc.php on line 182
Thu Feb 16 02:49:21 CET 2017 PHP Warning: mysqli_query() expects parameter 1 to be mysqli, null given in /usr/local/ispconfig/server/lib/classes/db_mysql.inc.php on line 183
Thu Feb 16 02:49:21 CET 2017 PHP Warning: mysqli_query() expects parameter 1 to be mysqli, null given in /usr/local/ispconfig/server/lib/classes/db_mysql.inc.php on line 228
Thu Feb 16 02:49:43 CET 2017 16.02.2017-02:49 - WARNING - Falsche Anfrage / Wrong QuerySQL-Query = INSERT INTO sys_log (server_id,datalog_id,loglevel,tstamp,message) VALUES (1, 0, 1, UNIX_TIMESTAMP(), 'Falsche Anfrage / Wrong QuerySQL-Query = INSERT INTO sys_log (server_id,datalog_id,loglevel,tstamp,message) VALUES (1, 0, 1, UNIX_TIMESTAMP(), 'Falsche Anfrage / Wrong QuerySQL-Query = INSERT INTO sys_log (server_id,datalog_id,loglevel,tstamp,message) VALUES (1, 0, 1, UNIX_TIMESTAMP(), \'Falsche A[…]
```
Here the last line is the interesting one, being the recursive error message: the inability to log to the database is an error that is tried to be logged to the database, causing the same error again with a longer message etc. until something breaks and it lands in cron.log. In reality the message is much longer (megabytes). To demonstrate I attach a file containing its first 600 lines, folded to 100 characters per line with `cat cron.log | fold -w 100 >cron.100cpl.log`.
I suppose the piece of code causing this is in `server/lib/classes/db_mysql.inc.php` line 228-232 and it could be solved by replacing it with the following:
```
$this->_iQueryId = mysqli_query($this->_iConnId, $sQuery);
if (!$this->_iQueryId and !substr($sQuery, 0, 19) === "INSERT INTO sys_log") {
$sQuery = strlen($sQuery) > 100 ? substr($in,0,100) . " [...]" : $sQuery;
$this->_sqlerror('Falsche Anfrage / Wrong Query', 'SQL-Query = ' . $sQuery);
return false;
}
```
That solution works so far (no issues since, but will have to test more). It's not the cleanest solution admittedly … . Also this issue is related to (fixed) issue #3974 "Escape error" but not the same – this one is recursive, resulting in huge log messages right from the first one, instead of gradually building up message size second by second.
[cron.100cpl.log](/uploads/ef75dac6f88c63a5a65c85c82f5bcccb/cron.100cpl.log)https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4511Let's encrypt gets disabled if user has no permission to set/change it2020-10-27T16:22:55ZKoSLet's encrypt gets disabled if user has no permission to set/change itHow to reproduce it in version 3.1.2:
- as admin: activate let's encrypt ssl & ssl for a subdomain (vhost)
- as user WITHOUT let's encrypt privileges/limit: just VIEW the vhost and click trough the tabs
- immediately the interface shows ...How to reproduce it in version 3.1.2:
- as admin: activate let's encrypt ssl & ssl for a subdomain (vhost)
- as user WITHOUT let's encrypt privileges/limit: just VIEW the vhost and click trough the tabs
- immediately the interface shows one change pending in the notification bar, and a view into the ispconfig database shows that the "ssl_lets_encrypt" is set to no
This means that If an admin activates let's encrypt for a vhost, and a normal user checks afterwards the settings of the vhost, he will disable the let's encrypt and make the httpS unusable (or even the whole website as probably in most cases the httpS redirection is activated).
I "fixed" the issue by giving all the users the ssl and let's encrypt permission.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4492Bug. Are not converted names IDN-domains on the home page.2020-07-31T12:19:16ZAlexanderBug. Are not converted names IDN-domains on the home page.Are not converted names IDN-domains on the home page
![IDN_domains](/uploads/260ebba183db9202778ea3e1818f0cb0/IDN_domains.PNG)Are not converted names IDN-domains on the home page
![IDN_domains](/uploads/260ebba183db9202778ea3e1818f0cb0/IDN_domains.PNG)3.2https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4401Issue on text filter field on DNS reccord edit interface2020-06-13T14:44:39ZZironda SrlIssue on text filter field on DNS reccord edit interfaceHi,
we noticed that there is a issue on text filter field on DNS reccord edit interface, basically if you insert a text to filter the records does not work
![Cattura](/uploads/c78406723fabc055984f785199583d8e/Cattura.PNG)
Seems miss the...Hi,
we noticed that there is a issue on text filter field on DNS reccord edit interface, basically if you insert a text to filter the records does not work
![Cattura](/uploads/c78406723fabc055984f785199583d8e/Cattura.PNG)
Seems miss the Javascript event that triggers the POST to apply the filterhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4390APS installer tasks get not added2020-09-07T17:51:54ZTill BrehmAPS installer tasks get not addedhttps://www.howtoforge.com/community/threads/aps-installer-not-installing-packages-after-update.75086/https://www.howtoforge.com/community/threads/aps-installer-not-installing-packages-after-update.75086/https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4381Relayhost issues in multiserver config2020-02-29T07:46:06ZTrafileaRelayhost issues in multiserver configI have an ISPConfig multisite installation and I'm having issues with relayhost configuration of slave servers,
I'll start explaining my configuration, I have three servers configured in a multiserver config, all of them are ubuntu 14 w...I have an ISPConfig multisite installation and I'm having issues with relayhost configuration of slave servers,
I'll start explaining my configuration, I have three servers configured in a multiserver config, all of them are ubuntu 14 with a LEMP configuration, the ISPConfig is v3.1.1p1, I have configured the sendgrid servers as relayhost on the ISPConfig configuration for each one of the servers, but when i check on the postfix config it gets configured only on the main server
root@s1:/usr/sbin# more /etc/postfix/main.cf |grep relayhost
relayhost = smtp.sendgrid.net:587
root@s2:/home/ubuntu# more /etc/postfix/main.cf |grep relayhost
relayhost =
root@s3:/home/ubuntu# more /etc/postfix/main.cf |grep relayhost
relayhost =
I've changed the configuration on the slave servers to none relayhost, waited several minutes and configured the relayhost back and worked for few days, but later it went back to no relayhost.
Could you check this please? is really anoying when i can't send emails from the slave servershttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4342PHP7.1: Cannot use string offset as an array in ini_to_array()2017-10-19T16:37:39ZPasPHP7.1: Cannot use string offset as an array in ini_to_array()Hello,
Running ispconfig_update.sh with php7.1 (on a Trusty, which is not supported, I know) produces the following error:
Using php7.0 is a workaround. (Successfully upgraded to ISPconfig to 3.1.1p1.)
```
Checking ISPConfig database...Hello,
Running ispconfig_update.sh with php7.1 (on a Trusty, which is not supported, I know) produces the following error:
Using php7.0 is a workaround. (Successfully upgraded to ISPconfig to 3.1.1p1.)
```
Checking ISPConfig database ..
...
PHP Warning: Illegal string offset 'permissions' in /tmp/update_from_tgz.sh.2Iemh78Uwj/ispconfig3_install/install/lib/install.lib.php on line 631
PHP Fatal error: Uncaught Error: Cannot use string offset as an array in /tmp/update_from_tgz.sh.2Iemh78Uwj/ispconfig3_install/install/lib/install.lib.php:631
Stack trace:
#0 /tmp/update_from_tgz.sh.2Iemh78Uwj/ispconfig3_install/install/lib/update.lib.php(137): ini_to_array('[permissions]\na...')
#1 /tmp/update_from_tgz.sh.2Iemh78Uwj/ispconfig3_install/install/update.php(288): updateDbAndIni()
#2 {main}
thrown in /tmp/update_from_tgz.sh.2Iemh78Uwj/ispconfig3_install/install/lib/install.lib.php on line 631
```3.1.8https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4223Paging problem (sites) (3.1)2020-02-26T23:15:09ZLeroyPaging problem (sites) (3.1)If a user has for example 1 website and 100 subdomains, and you would go to page 5 of the subdomains page and switch back to websites, it has set and remembers page 5 for websites also.
Not sure if this problem occurs anywhere else.If a user has for example 1 website and 100 subdomains, and you would go to page 5 of the subdomains page and switch back to websites, it has set and remembers page 5 for websites also.
Not sure if this problem occurs anywhere else.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4037Updating APS packages consume 100% CPU and never finish (3.1b2)2020-06-05T17:27:53ZTUpdating APS packages consume 100% CPU and never finish (3.1b2)See the screenshot below, this happen on multiple servers - worked fine before upgrading to 3.1 beta 2.
Also, Gmail sorts your Gitlab server as SPAM, missing DKIM keys it seems.
![Screen_Shot_2016-07-20_at_13.41.25](/uploads/f39572...See the screenshot below, this happen on multiple servers - worked fine before upgrading to 3.1 beta 2.
Also, Gmail sorts your Gitlab server as SPAM, missing DKIM keys it seems.
![Screen_Shot_2016-07-20_at_13.41.25](/uploads/f39572baa5a59cd6535bb939ce4f5348/Screen_Shot_2016-07-20_at_13.41.25.png)https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3853DNSSEC Error2020-07-23T14:32:38ZPatrick OmlandDNSSEC ErrorWenn eine Domain mit DNSSEC Signiert wurde und man Sie hinterher prüft auf korrektheit werden immer fehler angezeigt, das liegt daran, dass (in meinem fall) Die 3 nameserver 3x verschiedene DNSKEY's ausliefern und für die SIgnierung verw...Wenn eine Domain mit DNSSEC Signiert wurde und man Sie hinterher prüft auf korrektheit werden immer fehler angezeigt, das liegt daran, dass (in meinem fall) Die 3 nameserver 3x verschiedene DNSKEY's ausliefern und für die SIgnierung verwenden. Das ist so natürlich nicht richtig.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3844Limit Monitor key to URL compatible chars2020-09-03T15:29:33ZTill BrehmLimit Monitor key to URL compatible charsLimit the input field of the monitor key to chars that can be used in URL's.Limit the input field of the monitor key to chars that can be used in URL's.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3698Some strings in APS installer dont get translated.2020-06-05T17:27:13ZTill BrehmSome strings in APS installer dont get translated.https://www.howtoforge.com/community/threads/an-issue-with-language-files.71438/https://www.howtoforge.com/community/threads/an-issue-with-language-files.71438/https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3673Add more chown to create_jailkit_chroot.sh2020-07-18T20:32:02ZsdafsadfsdAdd more chown to create_jailkit_chroot.shIn file /usr/local/ispconfig/server/scripts/create_jailkit_chroot.sh I needed to change (between ><):
## Change ownership of the chroot directory to root
chown root:root $CHROOT_HOMEDIR
>>>>chown root:root $(basename $CHROOT_HOMEDIR...In file /usr/local/ispconfig/server/scripts/create_jailkit_chroot.sh I needed to change (between ><):
## Change ownership of the chroot directory to root
chown root:root $CHROOT_HOMEDIR
>>>>chown root:root $(basename $CHROOT_HOMEDIR)<<<<<
Otherwise jk_init may fail due to improper permissions.
Related to task #3429https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3662fail2ban postfix-sasl.conf not working with default filter2020-02-26T23:02:48ZKerr Smithfail2ban postfix-sasl.conf not working with default filterI have installed my server using the The Perfect Server - Debian 8 Jessie (Apache2, BIND, Dovecot, ISPConfig 3) and have been testing out the fail2ban part.
With the default filter in postfix-sasl.conf it was not catching all the atte...I have installed my server using the The Perfect Server - Debian 8 Jessie (Apache2, BIND, Dovecot, ISPConfig 3) and have been testing out the fail2ban part.
With the default filter in postfix-sasl.conf it was not catching all the attempted failed logins in mail.log.
I spent a while testing this and could not get myself banned using Thunderbird and repeatedly trying incorrect passwords. I have set this jail to work on ports 25 and 465.
I used fail2ban-regex to test the logs and found that if they look like the following they were being missed:
Sep 18 20:04:57 ?????? postfix/smtps/smtpd[25905]: warning: ???.???.???.???.some.host.net[???.???.???.???]: SASL LOGIN authentication failed: UGFzd3dvgaQ7
(?s are IP numbers and plain text etc...)
I had a look and found a replacement filter and tweaked it a little so it caught all these lines, it now looks like the following:
failregex = (?i): warning: [-._\w]+\[<HOST>\]: SASL (?:LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed(:[A-Za-z0-9+/ ]*)?$
Using fail2ban-regex with this filter it now catches all these attempted logins.
This filter now works if I attempt to login with incorrect details and I get banned as expected.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3659Speicherplatzbeschränkung wird nicht angezeigt unter Webseiten2020-06-19T15:15:29ZKristian S.Speicherplatzbeschränkung wird nicht angezeigt unter WebseitenAlso ich glaube den Fehler gefunden zu haben
Code:
if(!is_array($arr[$i])) return false;
sollte nicht FALSE sondern müsste TRUE zurückgeben
Code:
if(!is_array($arr[$i])) return TRUE;
Ist das nicht der Fall dann wird die Aba...Also ich glaube den Fehler gefunden zu haben
Code:
if(!is_array($arr[$i])) return false;
sollte nicht FALSE sondern müsste TRUE zurückgeben
Code:
if(!is_array($arr[$i])) return TRUE;
Ist das nicht der Fall dann wird die Abarbeitung abgebrochen, wenn sich in $arr[$i] ein Array befindet.
Das ist für das Feld $rec["used_sort"] der Fall, da hier nicht wie bei allen anderen Feldern wie used, hard, soft, files darauf geachtet wird, siehe z.B
Code:
if (!is_numeric($rec['soft'])) $rec['soft']=$rec['soft'][1];
...
, dass die Felder numerisch sind.
Oder zweitens eben hier sicherstellen dass
Code:
$rec['used_sort'] = $rec['used'];
ist nachdem die Nummerik von $rec['used'] geprüft wurde.
Thread: https://www.howtoforge.de/forum/threads/speicherplatzbeschraenkung-wird-nicht-angezeigt-unter-webseiten.9330/#post-46712https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3658Table "spamfilter_users" is not cleaned up2020-09-23T08:59:18ZMarkus BuschhoffTable "spamfilter_users" is not cleaned upThe table "spamfilter_users" does not seem to get cleaned up correctly. When deleting email-domains or clients, none of the corresponding table entries in "spamfilter_users" are deleted. This is NOT due to #3657 (wrong sys_userid) - even...The table "spamfilter_users" does not seem to get cleaned up correctly. When deleting email-domains or clients, none of the corresponding table entries in "spamfilter_users" are deleted. This is NOT due to #3657 (wrong sys_userid) - even when setting the sys_userid manually to a client, the entries remain after deleting that client (or his domain).
This error does not occur when the a postbox account is deleted.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3655Additional versions of PHP-FPM startup2021-01-23T20:18:51ZKasparsAdditional versions of PHP-FPM startupImagine, that we have 5 pools in our default PHP-FPM and 0 pools in additional PHP-FPM version, so we have running only one php-fpm master process (running without pools is not possible).
If we switch one site to additional php version, ...Imagine, that we have 5 pools in our default PHP-FPM and 0 pools in additional PHP-FPM version, so we have running only one php-fpm master process (running without pools is not possible).
If we switch one site to additional php version, pool is moved(regenerated?) in our additional pool.d. Then what happens - reload action is performed on both init scripts, but if php-fpm process is not running (as in case with our additional version) - reload fails.
So I suggest to check if process is already running and only then perform reload, otherwise start or at least restart is needed to bring up master process.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3640APS - location already in use (vhostsubdomain/domain)2020-06-05T17:28:11ZTimo BoldtAPS - location already in use (vhostsubdomain/domain)Hi all,
I've got a problem with installing an APS package on the same location, by different domains (subdomain).
In the file aps_guicontroller.inc.php the doc_root is used to check, if a location is already in use
/var/www/clients/...Hi all,
I've got a problem with installing an APS package on the same location, by different domains (subdomain).
In the file aps_guicontroller.inc.php the doc_root is used to check, if a location is already in use
/var/www/clients/clientX/webY/{{ LOCATION }} (example /var/www/clients/client1000/web2733/wp)
Because a subdomain uses the same doc_root, but got a different web_folder, the check will match everytime.
Domain: /var/www/clients/client1000/web2733/web/wp
SubDomain: /var/www/clients/client1000/web2733/sub/wp
Is not the same, but the check will compare (/var/www/clients/client1000/web2733/wp == /var/www/clients/client1000/web2733/wp).
So I think the best will be, to change the SQL query:
$instance_domains = $this->db->queryAllRecords("SELECT instance_id, s.value AS domain
FROM aps_instances AS i, aps_instances_settings AS s
WHERE i.id = s.instance_id AND s.name = 'main_domain'
AND i.customer_id = '".$this->db->quote($customerid)."'
AND s.value = '".$this->db->quote($postinput['main_domain'])."';");
So we will check for the used domain, only.
I created a patch file:
--- interface/lib/classes/aps_guicontroller.inc.php (revision )
+++ interface/lib/classes/aps_guicontroller.inc.php (revision )
@@ -559,7 +559,8 @@
$instance_domains = $app->db->queryAllRecords("SELECT instance_id, s.value AS domain
FROM aps_instances AS i, aps_instances_settings AS s
WHERE i.id = s.instance_id AND s.name = 'main_domain'
- AND i.customer_id = '".$app->db->quote($customerid)."';");
+ AND i.customer_id = '".$this->db->quote($customerid)."'
+ AND s.value = '".$this->db->quote($postinput['main_domain'])."';");
for($i = 0; $i < count($instance_domains); $i++)
{
$used_path = '';https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3637centos 7 : fail2ban not working due to firewall configuration2020-06-05T17:49:34ZDavide Andreacentos 7 : fail2ban not working due to firewall configurationCentos 7 (and Red Hat related distro) make use of the new firewalld service wich replaces the iptables command.
ISPConfig has its own firewall (bastille-firewall), hence the firewalld service has to be disabled.
But fail2ban default in...Centos 7 (and Red Hat related distro) make use of the new firewalld service wich replaces the iptables command.
ISPConfig has its own firewall (bastille-firewall), hence the firewalld service has to be disabled.
But fail2ban default installation is configured to use firewalld commands (a directive will be inserted in /etc/fail2ban/jail.d/00-firewalld.conf) and NO ANY jail command/rule will be executed.
Actually, NOT ANY jail will be added since the start of the service, but no error is raised on shell (they are only written to logs): probably most of people is running fail2ban unaware that fail2ban is NOT working.
ISPConfig installation should comment the following lines:
# [DEFAULT]
# banaction = firewallcmd-ipset
in the file:
/etc/fail2ban/jail.d/00-firewalld.confhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3634wrong email quota usage shown2020-09-30T11:27:03ZÖkrös Bélawrong email quota usage shownThe quota usage datas are in monitor_data mysql table and ordered by timestamp. This cause problems, and I can see the wrong/backup server's quota usage on dashboard or in the email quota menu. It worked well before I added a slave server.The quota usage datas are in monitor_data mysql table and ordered by timestamp. This cause problems, and I can see the wrong/backup server's quota usage on dashboard or in the email quota menu. It worked well before I added a slave server.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3633FTP Options UID GID - only selected users valid2020-09-08T16:05:41ZStepan LiskaFTP Options UID GID - only selected users validI tried to setup FTP access for readonly and readwrite user. So:
1) I've made .../web/ftp directory
2) setup standard FTP user with .../web/ftp directory in Options
3) setup second FTP user with the same directory (at this time both had ...I tried to setup FTP access for readonly and readwrite user. So:
1) I've made .../web/ftp directory
2) setup standard FTP user with .../web/ftp directory in Options
3) setup second FTP user with the same directory (at this time both had same rw access)
4) I've made new system user ftp-readonly with group ftp-readonly
5) tried to setup UID and GID for second user as ftp-readonly, but system replied ERROR Invalid system user or group
I tried some other system users and some worked and some not.
When I edited UID and GID directly in dbispconfig database, everything worked as expected.
OS: debian 7https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3597Database replication errors on some actions in ISPconfig32020-06-15T21:06:09ZMartijnDatabase replication errors on some actions in ISPconfig3On some actions, ie creating or deleting a mysql table (for a client), and when using mirrored servers that also have mysql active-active replication, replication often breaks as the command is sent to both servers, while mysql replicati...On some actions, ie creating or deleting a mysql table (for a client), and when using mirrored servers that also have mysql active-active replication, replication often breaks as the command is sent to both servers, while mysql replication replicates it to the other server. One of the mirrored servers then gets the same command twice then.
This might be overcome by adding "IF EXISTS" or "WHERE NOT EXISTS" to queries sent by ISPconfig3.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3591Custom port in ISPConfig vhost lost during update from p6 to p82020-06-15T21:05:12ZTill BrehmCustom port in ISPConfig vhost lost during update from p6 to p8https://www.howtoforge.com/community/threads/bug-ispconfig_update-sh-destroys-gui-port-setting.70302/https://www.howtoforge.com/community/threads/bug-ispconfig_update-sh-destroys-gui-port-setting.70302/https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3590Mailman virtual_to_transport.sh missing on Debian 8.2020-12-26T10:06:00ZTill BrehmMailman virtual_to_transport.sh missing on Debian 8.https://www.howtoforge.com/community/threads/mailman-integration-broken-on-3-0-5p8-clean-install.70323/https://www.howtoforge.com/community/threads/mailman-integration-broken-on-3-0-5p8-clean-install.70323/https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3589PHP Warning: mysqli::escape_string() expects parameter 1 to be string, array ...2020-09-30T11:26:49ZTill BrehmPHP Warning: mysqli::escape_string() expects parameter 1 to be string, array givenhttps://www.howtoforge.com/community/threads/cronjob-log-php-error-is-back.70314/https://www.howtoforge.com/community/threads/cronjob-log-php-error-is-back.70314/https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3588DNS zones - SQL2020-06-05T17:58:18ZPatryk PieniakDNS zones - SQLWhen we enter the editing DNS zones (dns entries), displays the query to the database.When we enter the editing DNS zones (dns entries), displays the query to the database.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3581Mail resync problems2020-07-22T13:17:48ZIspcommMail resync problemsThere seem to be an issue in multiserver setup and mail-resync via Tools/Resync/Resync Mailboxes
The issue is that /Maildir/subscriptions file gets regenerated and this causes imap customers to loose their subscriptions (Outlook clien...There seem to be an issue in multiserver setup and mail-resync via Tools/Resync/Resync Mailboxes
The issue is that /Maildir/subscriptions file gets regenerated and this causes imap customers to loose their subscriptions (Outlook clients in particular).
This is unconfirmed, but occured in my setup.
See https://www.howtoforge.com/community/threads/mailbox-resync-deleted-oulook-customer-subscriptions-to-imap.70245/https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3580Bind : Transfer of ‘domain.tld’ from xx.xx.xx.xx#53 failed receiving response...2020-06-05T17:59:13ZAntonBind : Transfer of ‘domain.tld’ from xx.xx.xx.xx#53 failed receiving responses permission deniedBind : Transfer of ‘domain.tld’ from xx.xx.xx.xx#53 failed receiving responses permission denied
/etc/bind/slave - permissions issue
need to update to allow secondary zone transfer
chmod g+rwx /etc/bind/slaveBind : Transfer of ‘domain.tld’ from xx.xx.xx.xx#53 failed receiving responses permission denied
/etc/bind/slave - permissions issue
need to update to allow secondary zone transfer
chmod g+rwx /etc/bind/slavehttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3572alias for awstats icons is missing in apache on debian jessie2017-11-07T13:01:24ZTill Brehmalias for awstats icons is missing in apache on debian jessiehttps://www.howtoforge.de/forum/threads/awstats-icons-alias-fehlt-in-sites-enabled-000-ispconfig-conf.9093/https://www.howtoforge.de/forum/threads/awstats-icons-alias-fehlt-in-sites-enabled-000-ispconfig-conf.9093/3.1.8https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3571Configured autoresponder subject is not used2020-07-23T12:22:17ZM. HaaseConfigured autoresponder subject is not usedIn the autoresponder form, there is an input field "Email Subject". However, it seems that this subject is not used in the email. Instead, the subject is hardcoded to 'Auto Response: from $RECIPIENT' in /usr/local/ispconfig/server/conf/a...In the autoresponder form, there is an input field "Email Subject". However, it seems that this subject is not used in the email. Instead, the subject is hardcoded to 'Auto Response: from $RECIPIENT' in /usr/local/ispconfig/server/conf/autoresponder.master.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3569jailkit/Debian Jessy: No login because of wrong permissions2020-07-06T15:19:23Zbonzojailkit/Debian Jessy: No login because of wrong permissionsAfter adding a shell-user it is not possible to login. After investigation the log tells:
jk_chrootsh[3917]: path /var/www/clients/clientX/webX/bin/ is group writable
jk_chrootsh[3917]: abort, /var/www/clients/clientX/webX is not a ...After adding a shell-user it is not possible to login. After investigation the log tells:
jk_chrootsh[3917]: path /var/www/clients/clientX/webX/bin/ is group writable
jk_chrootsh[3917]: abort, /var/www/clients/clientX/webX is not a safe jail, check ownership and permissions.
Temporary solution is to change permissions like chmod g-w /var/www/clients/clientX/webX/bin/
After that login is OK (no additonal functional tests)https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3566cannot use save_path in options tab of site specific settings2020-09-30T11:26:56ZLukas Wenningcannot use save_path in options tab of site specific settingssession.save_path = "tcp://127.0.0.1:6379?weight=1&database=10"
session.cache_expire = 1209600
session.save_handler = redis
try adding those values to the options tab.
this resulted in me having two save_path values inside the /etc/php...session.save_path = "tcp://127.0.0.1:6379?weight=1&database=10"
session.cache_expire = 1209600
session.save_handler = redis
try adding those values to the options tab.
this resulted in me having two save_path values inside the /etc/php5/fpm/pool.d/web1.conf had to manually correct it by editing the filehttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3565Changing owner of website from reseller to client broken2017-12-27T04:40:21ZChristian RößnerChanging owner of website from reseller to client brokenIf you log in as a reseller and create a website with everything:
- FTP-accounts
- SQL database
And you decide to create a new client and go to the settings of that already existing website, switching the owner to that newly creat...If you log in as a reseller and create a website with everything:
- FTP-accounts
- SQL database
And you decide to create a new client and go to the settings of that already existing website, switching the owner to that newly created client, things will break on that same server:
First the steps to take:
1. Create reseller
2- Create a website
3. Create a database for that website
4. Create a FTP account that point to a subfolder!
5. Create a SSL certificate and make the site https
--
5. Wait that dust has setteled and all changes are done
--
6. Create a new client
7. Edit the website and select that new client
8. Save the changes
--
9. Wait that dust has setteled and all changes are done
What happens:
- A new unix group is created for that new client.
- So a new apache DocumentRoot with all dependencies is created.
- Old website is _not_ copied nor moved.
- Symbolic links are outdated (/var/www/linkname and the one inside the clients folder)
- fstab entry is not removed nor unmounted
- chattr -i is not taken on old instance
- FTP path is reset to a base path of the new website
- SSL settings are not applied to the new side, although they are still available over website panel (had to save the ssl folder, remove the cert and re-add it). The apache vhost had lost its SSL settings
So this option seems fundamentally broken and dangerous at the moment. :-)
Expected result:
- I would expect that the old DocumentRoot stuuf gets moved to new folder
- FTP path restored with correct subfolder
- Old fstab entry being removed and unmounted
- chattr -i on old folder and removed from file system
- SSL still working
- Fixed sym-links on filesystem
Actual result:
Broken site. Shows the welcome site of ispconfig
If you want to contact me directly, feel free to drop me a note on my e-mail. I am from Germany. Sometimes mail/phone is more uncomplicated.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3561DEGRADED RAID (Broken Disk) No alarm in Ispconfig Backend -> Monitoring2020-08-06T20:15:11ZYovcho YovchevDEGRADED RAID (Broken Disk) No alarm in Ispconfig Backend -> MonitoringAfter login with 'admin' user on my ISPconfig Running on CentOS 6.6, I found bug, who not notify for broken disk in raid array:
here is the log:
--------------------------------------------------------------------------------------------...After login with 'admin' user on my ISPconfig Running on CentOS 6.6, I found bug, who not notify for broken disk in raid array:
here is the log:
----------------------------------------------------------------------------------------------------------------
Server: XXX (Redhat Unknown) ISPConfig 3.0.5.4p6
State: info (0 unknown, 0 info, 1 warning, 0 critical, 0 error)
ok:
The state of your Hard-Disk space is ok [More...]
Your Mail queue load is ok [More...]
Your RAID is ok [More...]
Your Server load is ok [More...]
All needed services are online [More...]
The System Log is O.K. [More...]
warning:
Your virus protection is OUTDATED! [More...]
----------------------------------------------------------------------------------------------------------------
After click on "More..." for RAID , have the error:
----------------------------------------------------------------------------------------------------------------
ioc0 vol_id 0 type IM, 2 phy, 698 GB, state DEGRADED, flags ENABLED
ioc0 phy 1 scsi_id 9 ATA HDD_MODEL AB0A, 698 GB, state ONLINE, flags NONE
ioc0 phy 0 scsi_id 1 ATA HDD_MODEL JC45, 698 GB, state MISSING, flags OUT_OF_SYNC
----------------------------------------------------------------------------------------------------------------https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3555Cannot set WebDAV password if "Minimum password strength" is set to >= "Strong"2020-02-26T22:18:11ZEricCannot set WebDAV password if "Minimum password strength" is set to >= "Strong"When the "Minimum password strength" under "System -> Interface -> Main Config -> Misc tab" is set to a value greater than or equal "Strong", any password that is entered under "Sites -> Web Access -> WebDAV Users" is rejected (even the ...When the "Minimum password strength" under "System -> Interface -> Main Config -> Misc tab" is set to a value greater than or equal "Strong", any password that is entered under "Sites -> Web Access -> WebDAV Users" is rejected (even the autogenerated ones which are usually of strength "very strong") with the following error message:
"The chosen password does not match the security guidelines. It has to be at least 5 chars in length and have a strength of "Strong"."https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3535Forward with Empty email destination2020-09-22T12:11:15ZCédricForward with Empty email destinationClient can create email forwad with an empty email destination.
ISPConfig Version 3.0.5.4p5
Fix:
File: /var/www/ispconfig/mail/form/mail_forward.tform.php
Add on line 102:
'validators' => array ( 0 => array ( 'type' => '...Client can create email forwad with an empty email destination.
ISPConfig Version 3.0.5.4p5
Fix:
File: /var/www/ispconfig/mail/form/mail_forward.tform.php
Add on line 102:
'validators' => array ( 0 => array ( 'type' => 'ISEMAIL',
'errmsg'=> 'email_error_isemail'),
),3.2Marius BurkardMarius Burkardhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3531broken web statistics - empty log dir2020-06-15T21:02:41ZImre Radbroken web statistics - empty log dirIn my installation web statistics were not working. The directory /var/www/clients/[clientX]/[domain]/log was never populated with log files, vlogger used the directory schema /var/log/ispconfig/httpd/[domain]. I could not see any obviou...In my installation web statistics were not working. The directory /var/www/clients/[clientX]/[domain]/log was never populated with log files, vlogger used the directory schema /var/log/ispconfig/httpd/[domain]. I could not see any obvious ways (configuration options) to change this, so I patched cron_daily.php as the following:
----------- diff begin
*** cron_daily.php.orig 2015-04-09 03:29:54.565646704 -0500
--- cron_daily.php 2015-04-09 03:27:19.173639516 -0500
*************** function setConfigVar( $filename, $varNa
*** 276,281 ****
--- 276,305 ----
+
+ // PATCH begin
+ $sql = "SELECT domain_id, domain, type, document_root, web_folder, parent_domain_id FROM web_domain WHERE (type = 'vhost' or type = 'vhostsubdomain') AND server_id = ".$conf['server_id'];
+ $records = $app->db->queryAllRecords($sql);
+ foreach($records as $rec) {
+
+ //* create traffic statistics based on yesterdays access log file
+ $yesterday = date('Ymd', time() - 86400);
+
+ $logfile = $rec['document_root'].'/' . $log_folder . '/'.$yesterday.'-access.log';
+ $total_bytes = 0;
+
+ // at first lets move the log files into client directory
+ $genlog = "/var/log/ispconfig/httpd/{$rec['domain']}/$yesterday-access.log";
+ echo "generic logfile: $genlog\n";
+ if((is_file($genlog))and(!file_exists($logfile))) {
+ echo "renaming $genlog to $logfile\n";
+ rename($genlog, $logfile);
+ }
+ }
+ // PATCH end
+
+
+
$sql = "SELECT domain_id, domain, document_root, web_folder, type, parent_domain_id FROM web_domain WHERE (type = 'vhost' or type = 'vhostsubdomain') and stats_type = 'webalizer' AND server_id = ".$conf['server_id'];
$records = $app->db->queryAllRecords($sql);
----------- diff end
If there is a better way for fixing this, please let me know.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3518website quota (Harddisk) broken after slave server added [vlibTemplate]2020-06-15T21:02:05ZDjerk Geurtswebsite quota (Harddisk) broken after slave server added [vlibTemplate]Changed my set up from a single machine to master/slave as per this tutorial "https://www.howtoforge.com/installing-a-web-email-and-mysql-database-cluster-on-debian-6.0-with-ispconfig-3"
I used to be able to see quota disk usage but t...Changed my set up from a single machine to master/slave as per this tutorial "https://www.howtoforge.com/installing-a-web-email-and-mysql-database-cluster-on-debian-6.0-with-ispconfig-3"
I used to be able to see quota disk usage but the table has disappeared from the website quota page.
Luckily the values are still being reported on the dashboard
relevant apache2/error.log entry:
mod_fcgid: stderr: PHP Warning: vlibTemplate Warning: Invalid loop structure passed to vlibTemplate::setLoop() (loop name: records). in /usr/local/ispconfig/interface/lib/classes/tpl_error.inc.php on line 84,https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3516Localization problems2020-06-14T20:52:32ZNordheimer MichaelLocalization problemsIn Russian localization files of DNS tool where're 2 files in wrong codepage: ru_dns_a_list.lng ru_dns_srv.lng (/usr/local/ispconfig/interface/web/dns/lib/lan)
here's code:
http://codepaste.net/4dqz8fIn Russian localization files of DNS tool where're 2 files in wrong codepage: ru_dns_a_list.lng ru_dns_srv.lng (/usr/local/ispconfig/interface/web/dns/lib/lan)
here's code:
http://codepaste.net/4dqz8fhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3504Search not working correctly2020-06-13T10:58:28ZmintessSearch not working correctlyI'm in the customer view, Tab E-Mail, listing Mailboxes.
Listing:
E-Mail Address | Realname | ...
martin@maurer.com | Martin Maurer
Searching for Realname:
"m" -> works
"Martin" -> works
"Martin Maurer" -> doesn't work
"Maur"...I'm in the customer view, Tab E-Mail, listing Mailboxes.
Listing:
E-Mail Address | Realname | ...
martin@maurer.com | Martin Maurer
Searching for Realname:
"m" -> works
"Martin" -> works
"Martin Maurer" -> doesn't work
"Maur" -> works
"Maurer" -> doesn't work
Also it seems that in some search fields i'm able to use % signs. Hopefully this is not passed directly to the database...3.2https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3503German Wording2020-09-22T12:11:03ZmintessGerman WordingHeisst das Ding E-Mail Konto oder Mailbox?
Im Reiter "Übersicht" heisst es "Mailbox-Speicherplatz"
Im Reiter "E-Mail" heisst der Menüpunkt "E-Mail Konto"Heisst das Ding E-Mail Konto oder Mailbox?
Im Reiter "Übersicht" heisst es "Mailbox-Speicherplatz"
Im Reiter "E-Mail" heisst der Menüpunkt "E-Mail Konto"3.2https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3500International Domain Names2020-10-20T18:23:08ZJoseph AbdiInternational Domain NamesYou can reproduce the bug with:
1. Create a mailbox
2. Add a copy to email address as (someone@domain.international)
That fails with invalid email address ....
Of-course now domain.international is a very valid domain name ...
...You can reproduce the bug with:
1. Create a mailbox
2. Add a copy to email address as (someone@domain.international)
That fails with invalid email address ....
Of-course now domain.international is a very valid domain name ...
Joseph3.2https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3497Mailbox add -> Spamfilter jumps from not activated to normal2020-06-15T16:18:45ZKoSMailbox add -> Spamfilter jumps from not activated to normalWhen you select "add new mailbox" the default spamfilter is "-not enabled-", but when i press save without entering any information, i get the error message with "Email address is invalid. etc", but the spamfilter option changes to "norm...When you select "add new mailbox" the default spamfilter is "-not enabled-", but when i press save without entering any information, i get the error message with "Email address is invalid. etc", but the spamfilter option changes to "normal" instead of staying on "-not enabled-". (they same happens if you try to switch to the autoresponder etc tab).https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3493Multiserver config - DB server is not properly populated2020-09-30T11:27:14ZTihomir VlahovskiMultiserver config - DB server is not properly populatedHello,
We are using ISPC version 3.0.5.4p5, multiserver config (2 servers). One server for mail services (master) and second server for web/db (child node).
The problem is when you specify in System -> Server Services -> that master (is ...Hello,
We are using ISPC version 3.0.5.4p5, multiserver config (2 servers). One server for mail services (master) and second server for web/db (child node).
The problem is when you specify in System -> Server Services -> that master (is ONLY mail) and child is Web and DB, the dropdown menu while creating new DB, the server field is populated with the correct text but in dbispconfig/web_database/server_id is the ID of the master node.
To avoid this, you have to click on the dropdown menu and click the text. Then the correct value is populated and DB is created on the correct server and not on the master node which is no configured (in Server services) to serve as DB.
Regards,
-Tihohttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3471Client of reseller dropmenu and re-created reseller2020-07-18T20:23:42ZSami LahtinenClient of reseller dropmenu and re-created resellerHi,
There's a bug in client limits.
- Create reseller 'foo'
- Delete reseller 'foo'
- Create reseller again with name 'foo'
- It does not show up at the client limits => Client of reseller dropmenu
That is very confusing, be...Hi,
There's a bug in client limits.
- Create reseller 'foo'
- Delete reseller 'foo'
- Create reseller again with name 'foo'
- It does not show up at the client limits => Client of reseller dropmenu
That is very confusing, because it's possible to create resellers with same username as deleted ones.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3469mysql-virtual_outgoing_bcc.cf is zero size2020-09-30T11:27:21ZNickmysql-virtual_outgoing_bcc.cf is zero sizeafter one of ispconfig git updates have a error in postfix log - postfix can't read dbname from mysql-virtual_outgoing_bcc.cf file`after one of ispconfig git updates have a error in postfix log - postfix can't read dbname from mysql-virtual_outgoing_bcc.cf file`https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3467Modify "PHP-FPM init script" field labels to reflect expected input type in v...2020-09-07T12:58:44ZBen JohnsonModify "PHP-FPM init script" field labels to reflect expected input type in various scenariosThere are two instances of the field labeled "PHP-FPM init script":
1) System -> Server Config -> [server name] -> Web -> PHP Settings
2) System -> Additional PHP Versions -> Add new PHP version -> PHP-FPM Settings
The first instance ...There are two instances of the field labeled "PHP-FPM init script":
1) System -> Server Config -> [server name] -> Web -> PHP Settings
2) System -> Additional PHP Versions -> Add new PHP version -> PHP-FPM Settings
The first instance of this field expects a "service name" or "init script name", which cannot contain a path prefix (i.e., no forward slashes). Per Till, "The field in server config shall contain either the name of the init script if its a init script based system or the name of the service if it uses a different init system."
The second instance expects a full path, which may contain forward slashes, because additional PHP versions may be installed anywhere on the system, including in uncommon locations, thus necessitating the ability to enter a full path.
The field labels should be modified to reflect the type of input that is required in each instance.
For detailed discussion, see:
https://www.howtoforge.com/community/threads/ispconfig-with-zend-server.68112/#post-324366https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3466dns module does not handle mails with dot before @ correctly2020-09-08T16:14:26ZSWdns module does not handle mails with dot before @ correctlyImporting a zone file that has a SOA entry like this:
@ IN SOA robotns2.second-ns.de. walter\.white.greymatter.com. (
Does show up in the interface correctly as "walter\.white.greymatter.com."
but upon doing a save it complains about wr...Importing a zone file that has a SOA entry like this:
@ IN SOA robotns2.second-ns.de. walter\.white.greymatter.com. (
Does show up in the interface correctly as "walter\.white.greymatter.com."
but upon doing a save it complains about wrong format of email ( due to the backslash )https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3459database backup interval/backup_copies can't access from web interface2020-03-21T21:46:54ZNickdatabase backup interval/backup_copies can't access from web interfacewhen database created and modified by web interface we can't see fields for enable/disable backups and backup_copies count, now I see that for ~40% of my tables backup is disabled and have a 1,3 or a 7 backups countwhen database created and modified by web interface we can't see fields for enable/disable backups and backup_copies count, now I see that for ~40% of my tables backup is disabled and have a 1,3 or a 7 backups counthttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3455php-fpm and mail settings2021-02-13T20:43:16ZNickphp-fpm and mail settingsI use git version of a isponfig on debian 7.x and Postfix
After I change for some sites web execution from fcgi to php-fpm I see, that mail mapping from "admin@myclientsite1.com" dropped and server send all mail from "webXXX@myhostingser...I use git version of a isponfig on debian 7.x and Postfix
After I change for some sites web execution from fcgi to php-fpm I see, that mail mapping from "admin@myclientsite1.com" dropped and server send all mail from "webXXX@myhostingserver.com" account.
And mail (reports delivery, as example) for user webXXX going to at /var/spool/mail/webXXX file, so I don't know, how to fix thishttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3453PHP warnings in cron log.2019-08-17T09:03:04ZTill BrehmPHP warnings in cron log.https://www.howtoforge.com/community/threads/php-warning-in-cron-protocol-since-01-01-2015.68007/https://www.howtoforge.com/community/threads/php-warning-in-cron-protocol-since-01-01-2015.68007/https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3448mod_python with latest epel can't find all python 2.7 repos2020-11-01T16:14:40ZWim Geeraetsmod_python with latest epel can't find all python 2.7 reposbyte-compiling /usr/lib64/python2.7/site-packages/mod_python/version.py to version.pyc
File "/usr/lib64/python2.7/site-packages/mod_python/version.py", line 3
version = "fatal: Not a git repository (or any of the parent directories...byte-compiling /usr/lib64/python2.7/site-packages/mod_python/version.py to version.pyc
File "/usr/lib64/python2.7/site-packages/mod_python/version.py", line 3
version = "fatal: Not a git repository (or any of the parent directories): .git
^
SyntaxError: EOL while scanning string literal
writing byte-compilation script '/tmp/tmpazkqjM.py'
/bin/python -OO /tmp/tmpazkqjM.py
File "/usr/lib64/python2.7/site-packages/mod_python/version.py", line 3
version = "fatal: Not a git repository (or any of the parent directories): .git
^
SyntaxError: EOL while scanning string literal
removing /tmp/tmpazkqjM.pyhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3446creating two same alias DNS records result to .err bind zone config2020-09-22T12:10:16Zpearcreating two same alias DNS records result to .err bind zone configit is possible to add first alias but after creating second one with same hosname it result to non functional dns zone
additional info:
i tried this also with cname but it is disabled
allowing multiple alias or cname records with same h...it is possible to add first alias but after creating second one with same hosname it result to non functional dns zone
additional info:
i tried this also with cname but it is disabled
allowing multiple alias or cname records with same hostname and different destination would be great for round robin
this work great with A records but with large number of DNS records overview can be lost...3.2https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3443Behavior of firewall records + Bastille-firewall2020-09-22T12:09:43ZAlexander KampBehavior of firewall records + Bastille-firewallIn ISPConfig3 you can enter firewall records to open TCP/UDP ports. By default no records are listed.
Because I had to add a port range (to support TLS+passive FTP) I looked around how to implement that. Solution is to append it to the ...In ISPConfig3 you can enter firewall records to open TCP/UDP ports. By default no records are listed.
Because I had to add a port range (to support TLS+passive FTP) I looked around how to implement that. Solution is to append it to the listed ports: (first):(last) . And add passive port range to Pure-FTPD configuration.
I got confused by the configuration file /etc/Bastille/bastille-firewall.cfg. (TCP|UDP)_PUBLIC_SERVICES ports are space seperated, not comma seperated.
Let's say you want to have ports: 20,21,[...],8080,2525,3389
The next lines will tell what ISPconfig3 does:
- In case you change every comma to space, only the first value is set in bastille-firewall.cfg. ISPConfig3 does not respond because it's port is blocked. You have to manually fix that by editing configuration and add port 8080 there. Then service bastille-firewall restart. Then ISPConfig3 response again.
- In case you change every comma to space, and append 6500:6600 to it, every port between first-value (20) and last-value (6600) is opened. Oops. And ISPConfig3 is unusable again. Fix by step above.
- Even if you order ports in right order, it acts like above. It preferes the range (20:6600).
The big lesson in here: Only when you comma seperated values in port numbers, it works.
But most problematic thing is, ISPConfig3 accepts it and doesn't warn you for this dangerous behavior. The worst thing is that you don't have access to ssh (which runs on port 22), so falling back to console (or driving to DC/remote hands) is the only option.3.2https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3437Sever selector in database list shows all servers2020-03-02T10:17:49ZTill BrehmSever selector in database list shows all serversThe server selector in the header of the database table shows all database server in the client view and not just the servers that have databases for that client.The server selector in the header of the database table shows all database server in the client view and not just the servers that have databases for that client.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3436Ascertain customer report of mail address problems2020-09-21T19:05:56ZMatthias Greßmannm.gressmann@timmehosting.deAscertain customer report of mail address problemsA customer reported the following:
- He changed the password of e-mail address A.
- He changed the (optional) name of address B.
- Address A disappeared, and all of his mails were found in the mailbox of address B.
- He furthermore vows ...A customer reported the following:
- He changed the password of e-mail address A.
- He changed the (optional) name of address B.
- Address A disappeared, and all of his mails were found in the mailbox of address B.
- He furthermore vows he did not touch the e-mail alias of either address A or B.
I suppose this is a case of user error but nonetheless I am reporting it here because I promised the customer - and on the slim chance that anyone else had similar things happening.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3433PHP Warning2020-09-21T19:05:37ZSteven FarleyPHP WarningAfter running an update I noticed this warning message. To avoid seeing this message can the installer default the timezone to UTC using PHP's date_default_timezone_set() function?
Warning Message:
----------------
PHP Warning: date():...After running an update I noticed this warning message. To avoid seeing this message can the installer default the timezone to UTC using PHP's date_default_timezone_set() function?
Warning Message:
----------------
PHP Warning: date(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone. in /tmp/ispconfig3_install/install/update.php on line 501https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3431Search function doesn't search in relay recipients2020-03-02T10:20:10ZJan KopeckySearch function doesn't search in relay recipientsWhen I am searching for domain there is no result for relay recipients even if this domain is presented there.When I am searching for domain there is no result for relay recipients even if this domain is presented there.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3428PHP open_basedir security level Medium2020-03-02T10:21:31Zklondike-studioPHP open_basedir security level Mediumhide "PHP open_basedir" directive to the "site", if you configure the server security level "Medium"
The Directive is not relevant at this level of security open_basedir is not used.
Directive need interpretation when setting highhide "PHP open_basedir" directive to the "site", if you configure the server security level "Medium"
The Directive is not relevant at this level of security open_basedir is not used.
Directive need interpretation when setting highhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3427Check if client lock function works when used with the remote api.2020-08-28T16:58:51ZTill BrehmCheck if client lock function works when used with the remote api.http://www.howtoforge.com/forums/showthread.php?t=67653http://www.howtoforge.com/forums/showthread.php?t=67653https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3413cgi-bin directory in Apache configuraiton lacks AllowOverrider All2020-09-20T18:39:58ZAssen Totincgi-bin directory in Apache configuraiton lacks AllowOverrider AllWhen ISPconfig generates an Apache configuration file with CGI enabled, it creates a <Directory> section listing options for the local directory that is mapped to /cgi-bin/ from the URL.
This description has two directives:
Allow from ...When ISPconfig generates an Apache configuration file with CGI enabled, it creates a <Directory> section listing options for the local directory that is mapped to /cgi-bin/ from the URL.
This description has two directives:
Allow from all
Order allow,deny
However, it needs another one, without which access restrictions to /cgi-bin/ via local .htaccess file (e.g., password protection) will not work:
AllowOverride All
This directive is already present for the main web directory, but is omitted for the /cgi-bin directory.
Please, add it to the appropriate template. Alternatively, change the AllowOverride for the whole virtual host from 'None' to 'All' (which is, IMHO, a worse solution).https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3412APS Installer for Wordpress creates empty configuration file2020-03-02T10:22:46ZAssen TotinAPS Installer for Wordpress creates empty configuration fileI have IPSConfig 3.0.5.4p4 with a multi-server setup on CentOS 6.6. In the APS repository I have Wordpress 4.0-29.
When I try to install Wordpress using the APS installer, after a few minutes (and runs of the cron job) I observe the ...I have IPSConfig 3.0.5.4p4 with a multi-server setup on CentOS 6.6. In the APS repository I have Wordpress 4.0-29.
When I try to install Wordpress using the APS installer, after a few minutes (and runs of the cron job) I observe the following situation:
- The wordpress directory is properly created and populated.
- A blank database and its associated user get created. However, there are no tables in the database (I'm not sure if the APS installer is expected to create the database tables or not).
- An empty configuration file, /wp-config.php is created in the Wordpress directory. This is the real problem: Wordpress expected to either have a valid configuration file (with proper DB credentals for a populated database), or not to have a config file at all - and then the user will be redirected to the setup page, which will create the configuration file and DB tables.
There are no other pending tasks in the job queue.
If I remove the empty config file, Wordpress redirects me to the installation page, then creates a config file and populates the database just as expected.
I'm raising the severity to Medium because, even though an intermittent solution is available, most people will not have the knowledge to figure it out - and to them installing Wordpress via APS installer becomes impossible.
WWell,https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3411statistics to make the frame in the control panel2020-03-02T10:23:02Zklondike-studiostatistics to make the frame in the control panelstatistics to make the frame in the control panel
http://forum.mini-server.ru/download/file.php?id=590&t=1&filename=00.pngstatistics to make the frame in the control panel
http://forum.mini-server.ru/download/file.php?id=590&t=1&filename=00.pnghttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3403All numeric hostnames won't work with apache vhosts2020-03-02T10:23:45ZNicki MesserschmidtAll numeric hostnames won't work with apache vhostsHi,
some days ago I created a vhost for a customer with an all numeric hostname (1234.domain.tld). This seemed to work as it was the only vhost for the IP of the customer.
Yesterday I added another vhost and the all numeric vhost was ...Hi,
some days ago I created a vhost for a customer with an all numeric hostname (1234.domain.tld). This seemed to work as it was the only vhost for the IP of the customer.
Yesterday I added another vhost and the all numeric vhost was not reachable anymore as the default/catchall host changed with the new host.
The RFC seems not to forbid all numeric hostnames anymore, but apache does not handle them in a nice fashion.
I think there shoud at least be a warning when creating a host like this.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3400Inadequate hostname validation rules prevent valid hostnames from being enter...2020-09-07T13:00:00ZBen JohnsonInadequate hostname validation rules prevent valid hostnames from being entered in Server ConfigNOTE: I am using ISPConfig 3.0.5.4.p5, but this version is not available in the "Reported Version" drop-down.
According to RFC 1123 ( https://tools.ietf.org/html/rfc1123 ), valid hostnames do not necessarily have to be fully-qualified d...NOTE: I am using ISPConfig 3.0.5.4.p5, but this version is not available in the "Reported Version" drop-down.
According to RFC 1123 ( https://tools.ietf.org/html/rfc1123 ), valid hostnames do not necessarily have to be fully-qualified domain names (FQDNs).
The ISPConfig interface seems to require a FQDN in the Hostname field. I am trying to enter a hostname such as "MY-SERVER" (without the quotes) and ISPConfig complains with "Invalid Hostname." when attempting to save the change.
From what I can determine, the validation was added with http://git.ispconfig.org/ispconfig/ispconfig3/commit/a43eb3b0ccaf84a6ab44a1f46f47cc4f8ce54844 .
I am happy to write a more suitable regular expression to validate hostnames, if one cannot readily be found on the Internet.
P.S. I am very grateful for the addition of the Hostname field.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3362Email filter not working correctly2020-07-28T13:40:55ZDaniel IancuEmail filter not working correctlyHaving an error on one of my servers I was being spammed by an email, so I decided to create a filter for it to automatically delete it.
I decided to delete the email base on the subject (as I want to receive the rest of the emails fr...Having an error on one of my servers I was being spammed by an email, so I decided to create a filter for it to automatically delete it.
I decided to delete the email base on the subject (as I want to receive the rest of the emails from that sender).
So, I logged in the ISPConfig interface, got to Email -> Email Mailbox and clicked my mailbox. From there to Mail Filter and created a new filter with the following options:
Source: Subject Contains Cron <root@server2> root test -x /usr/sbin/tigercron && { [ -r "$DEFAULT" ] && . "$DEFAULT" ; nice -n$NICETIGER /usr/sbin/tigercron -q ; }
It's an error from one of the scripts of tiger (I reported it).
Then in my mail sever log I have this line:
mail dovecot: lda(mymailbox@domain.com): Error: sieve: failed to open script /var/vmail/domain.com/mymailbox/.sieve (view user logfile /var/vmail/domain.com/mymailbox/.sieve.log for more information)
Looking in /var/vmail/domain.com/mymailbox/.sieve.log I found those lines over and over:
sieve: info: started log at Sep 29 14:30:05.
main script: line 6: error: invalid regular expression '.*Cron <root@server2> root test -x /usr/sbin/tigercron && { \[ -r "$DEFAULT" \] && . "$DEFAULT" ; nice -n$NICETIGER /usr/s...' for regex match: invalid content of \{\}.
main script: error: validation failed.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3357I can add an IP via ISPConfig, but when I delete it does not remove from inte...2020-07-27T12:45:55ZAndyI can add an IP via ISPConfig, but when I delete it does not remove from interfaceHave Debian 7.5 Wheezy and tried to remove IP address I had added earlier thru IPConfig and it did not remove. Had to manually remove from /etc/network/interfaces and restart.Have Debian 7.5 Wheezy and tried to remove IP address I had added earlier thru IPConfig and it did not remove. Had to manually remove from /etc/network/interfaces and restart.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3354Bastille firewall is not set to be started at boot time on centos 6.52020-12-26T10:06:00ZTill BrehmBastille firewall is not set to be started at boot time on centos 6.5http://www.howtoforge.com/forums/showthread.php?t=66992http://www.howtoforge.com/forums/showthread.php?t=66992https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3327DNS sub records created by admin dont show up in client login.2020-06-05T17:48:01ZTill BrehmDNS sub records created by admin dont show up in client login.http://www.howtoforge.com/forums/showthread.php?t=66804http://www.howtoforge.com/forums/showthread.php?t=66804https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3325domain set to proxy on nginx server does not log2021-03-12T16:40:50ZAntaldomain set to proxy on nginx server does not logIf a domain on a nginx server is set to proxy to another domain the log capabilities are disabled in the vhost config file. The lines below are missing from the config.
[...]
error_log /var/log/ispconfig/httpd/domain.tld/error.log;
acce...If a domain on a nginx server is set to proxy to another domain the log capabilities are disabled in the vhost config file. The lines below are missing from the config.
[...]
error_log /var/log/ispconfig/httpd/domain.tld/error.log;
access_log /var/log/ispconfig/httpd/domain.tld/access.log combined;
[...]
In our situation we need these logs for statistics generation (we proxy websites to a centralized system). I could imagine this is not the case for everybody but for
Maybe logging can also be reduced with conditional logging (if=)?
http://nginx.org/en/docs/http/ngx_http_log_module.html#access_loghttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3293pool.d conf datei wird gelöscht bei Zusatz PHP Version2020-09-30T11:27:07ZPatrick Omlandpool.d conf datei wird gelöscht bei Zusatz PHP VersionHier zu finden, http://www.howtoforge.de/forum/entwicklerforum-15/bug-zustz-php-version-subdomain-8349/#post41658Hier zu finden, http://www.howtoforge.de/forum/entwicklerforum-15/bug-zustz-php-version-subdomain-8349/#post41658https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3292update.php ignores apps_vhost_ip in /usr/local/ispconfig/server/conf-custom/i...2020-09-20T19:45:57ZNed Hadupdate.php ignores apps_vhost_ip in /usr/local/ispconfig/server/conf-custom/install/nginx_apps.vhostFirst thing I noticed is that /usr/local/ispconfig/server/conf/nginx_apps.vhost.master has line
listen {apps_vhost_ip}{apps_vhost_port};
it should be
listen {apps_vhost_ip}:{apps_vhost_port};
The bug:
http://www.howtoforge.com/fo...First thing I noticed is that /usr/local/ispconfig/server/conf/nginx_apps.vhost.master has line
listen {apps_vhost_ip}{apps_vhost_port};
it should be
listen {apps_vhost_ip}:{apps_vhost_port};
The bug:
http://www.howtoforge.com/forums/showpost.php?p=317438&postcount=31
http://www.howtoforge.com/forums/showpost.php?p=317439&postcount=32
so if I copy /usr/local/ispconfig/server/conf/nginx_apps.vhost.master to /usr/local/ispconfig/server/conf-custom/install and change line {apps_vhost_ip}{apps_vhost_port} to {apps_vhost_ip}:{apps_vhost_port} and run update.php and regenrate config I get follwofing
listen :8081;
in /etc/nginx/sites-available/apps.vhost
and nginx configuration test fails.
The IP part is ignored even if I set it in ISPConfig gui.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3291Disable Autoresponder Error2020-03-06T17:29:56ZNilton OSDisable Autoresponder ErrorEnable the autoresponder
Mailbox -> Autoresponder
#0 db->query(UPDATE `mail_user` SET `autoresponder_subject` = 'Vacation', `autoresponder_text` = 'Test Vacation', `autoresponder` = 'n', `autoresponder_start_date` = '', `autoresp...Enable the autoresponder
Mailbox -> Autoresponder
#0 db->query(UPDATE `mail_user` SET `autoresponder_subject` = 'Vacation', `autoresponder_text` = 'Test Vacation', `autoresponder` = 'n', `autoresponder_start_date` = '', `autoresponder_end_date` = '' WHERE 1 AND mailuser_id = 2) called at [/usr/local/ispconfig/interface/lib/classes/tform_actions.inc.php:179] #1 tform_actions->onUpdateSave(UPDATE `mail_user` SET `autoresponder_subject` = 'Vacation', `autoresponder_text` = 'Test Vacation', `autoresponder` = 'n', `autoresponder_start_date` = '', `autoresponder_end_date` = '' WHERE 1 AND mailuser_id = 2) called at [/usr/local/ispconfig/interface/lib/classes/tform_actions.inc.php:119] #2 tform_actions->onUpdate() called at [/usr/local/ispconfig/interface/lib/classes/tform_actions.inc.php:94] #3 tform_actions->onSubmit() called at [/usr/local/ispconfig/interface/web/mail/mail_user_edit.php:230] #4 page_action->onSubmit() called at [/usr/local/ispconfig/interface/lib/classes/tform_actions.inc.php:68] #5 tform_actions->onLoad() called at [/usr/local/ispconfig/interface/web/mail/mail_user_edit.php:328] Incorrect datetime value: '' for column 'autoresponder_start_date' at row 1https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3274Wilcard entires in apache_ispconfig.conf.master crash Apache2020-05-25T12:09:57ZNed HadWilcard entires in apache_ispconfig.conf.master crash ApacheThis happens on servers with multiple ISPConfig installations. My case.
For more info please see http://www.howtoforge.com/forums/showpost.php?p=317087&postcount=5This happens on servers with multiple ISPConfig installations. My case.
For more info please see http://www.howtoforge.com/forums/showpost.php?p=317087&postcount=5https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3214Check why some special chars can not be used in the mail system2020-08-30T15:33:26ZTill BrehmCheck why some special chars can not be used in the mail systemhttp://www.howtoforge.de/forum/installation-und-konfiguration-12/mailpasswoerter-mit-sonderzeichen-8210/http://www.howtoforge.de/forum/installation-und-konfiguration-12/mailpasswoerter-mit-sonderzeichen-8210/https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/3209Bug in backup routine2020-03-20T10:39:24ZAlexBug in backup routineIn addition to the ticket no. #3222 there is still a problem when you disable the backup but let the interval at - let's say 1. ISPConfig will execute the process to remove the files from backup folder, but then it creates a new backup. ...In addition to the ticket no. #3222 there is still a problem when you disable the backup but let the interval at - let's say 1. ISPConfig will execute the process to remove the files from backup folder, but then it creates a new backup. In my case it created a database backup although the backup functionality was and is disabled.