ISPConfig 3 issueshttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues2024-03-28T23:05:40Zhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5851updater not ask for master root password unless needed2024-03-28T23:05:40ZJesse Norellupdater not ask for master root password unless neededWhen updating a slave server, the updater always prompts for the master's mysql root credentials, even when not needed.
We should first query the master using dbmaster connection info for the current server.dbversion - if there is an sq...When updating a slave server, the updater always prompts for the master's mysql root credentials, even when not needed.
We should first query the master using dbmaster connection info for the current server.dbversion - if there is an sql update available, the credentials will be needed. If there is not an sql update, the credentials should only be asked for if answering yes to `Reconfigure Permissions in master database?`.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5846cannot configure DMARC without DKIM2020-10-22T12:56:59Zleecannot configure DMARC without DKIMas the title says, the control panel will not let me create a DMARC record when DKIM isn't already configured.
i'm setting the receiver policy as none, valid email addresses for aggregate data and forensic data reporting, selecting only ...as the title says, the control panel will not let me create a DMARC record when DKIM isn't already configured.
i'm setting the receiver policy as none, valid email addresses for aggregate data and forensic data reporting, selecting only 'generate report if spf failed' for forensic reporting options, and DKIM and SPF identifier alignments are both set to relaxed.
but whenever i try to save these DMARC settings, the only response i get from ispconfig is 'no active DKIM record'.
i should be able to create a dmarc record even without a dkim record and just have it use SPF.
even those at dmarc.org say it should be possible: https://dmarc.org/2017/03/can-i-use-dmarc-if-i-have-only-deployed-spf/https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5844Incorrect language management2020-10-23T12:25:08Zcubellsvicent@vcubells.netIncorrect language managementI speak catalan language, and iso 639-1 code for catalan language is **ca**
As you can see in this capture:
![ispconfig_languages_issue](/uploads/37dad9acc67e9bf0477c0203385e026d/ispconfig_languages_issue.png)
I can't create language...I speak catalan language, and iso 639-1 code for catalan language is **ca**
As you can see in this capture:
![ispconfig_languages_issue](/uploads/37dad9acc67e9bf0477c0203385e026d/ispconfig_languages_issue.png)
I can't create language templates for catalan language because **ca** code is taken by Canada country.
Ispconfig is managing languages incorrectly, among other things, because we are confusing country codes and language codes.
Ispconfig must handle better language codes as another free software applications do.
Reference: https://en.wikipedia.org/wiki/List_of_ISO_639-1_codes#CAPlanned featureshttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5841Limit access to mail tabs via customer template2021-09-07T21:05:00ZMichaelLimit access to mail tabs via customer templateCurrent behaviour is that the access to the mail tabs (filters, autoresponder, backup etc) are controlled by a system-wide configuration option. It would be convenient to manage those via the customer template.Current behaviour is that the access to the mail tabs (filters, autoresponder, backup etc) are controlled by a system-wide configuration option. It would be convenient to manage those via the customer template.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5840List items (dbs/sites etc) when they are in use on a server that is about to ...2020-10-21T10:14:50ZMichaelList items (dbs/sites etc) when they are in use on a server that is about to be removed from client templateExample:
![image](/uploads/0b7fa1c4d4207c3e43afbad825fdd3b7/image.png)
I had to debug that to figure out which DB or site was causing the problem.
It would be useful if this information would be displayed immediately.Example:
![image](/uploads/0b7fa1c4d4207c3e43afbad825fdd3b7/image.png)
I had to debug that to figure out which DB or site was causing the problem.
It would be useful if this information would be displayed immediately.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5834Create secondary zones automatically2021-02-27T07:08:32ZThomCreate secondary zones automaticallyFrom discussion on #4179
Add possibility to add secondary zones automatically through the DNS wizard.\
You should be able to add those zones to the wizard template, along with their settings (NS IP, xfer).\
There are several ways to go...From discussion on #4179
Add possibility to add secondary zones automatically through the DNS wizard.\
You should be able to add those zones to the wizard template, along with their settings (NS IP, xfer).\
There are several ways to go, we have to keep in mind that in the future we probably want to use traditional mirroring again by saving the keys to the database and replicating that to the ISPConfig mirrors. Read discussion(s) on #4179 about possible ways to implement this.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5833Failed install requires manual uninstall2020-10-21T17:28:36ZTony GFailed install requires manual uninstallStart an installation in expert mode and break it when prompted for cert detail. Now try uninstall.php. It fails because required scripts aren't available yet in "/usr/local/ispconfig/server/lib/". Try to install again and it says an ins...Start an installation in expert mode and break it when prompted for cert detail. Now try uninstall.php. It fails because required scripts aren't available yet in "/usr/local/ispconfig/server/lib/". Try to install again and it says an installation was found, use update.
This is a request to display detail or a link to detail for manually removing all components. OR, modify the install, update, or uninstall to detect a partial installation and accommodate.
This scenario happened when I was entering the CA info and got called away from my PC. Due to the issue documented in #5830, UFW was enabled, SSH was disabled, and my connection was killed. A simple ctrl-C or ctrl-D will reproduce the conditions as well. In the real world any sort of accident can happen to leave any software in an ambiguous state.
The instructions I have written for myself to recover from this are as follows:
- mysql -u root -p
- drop database dbispconfig;
- show databases;
- Verify that the database has been removed
- quit
- rm -rf /usr/local/ispconfig/
- Remove the existing installation files. Be extremely careful with this command.
- rm -f /usr/local/bin/ispconfig*
- crontab -e
- Remove lines related to ISPConfighttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5797Purge courier2021-01-07T17:27:29ZThomPurge courierWe are planning to remove Courier support in the future, this is the related issue so we can discuss and schedule it.We are planning to remove Courier support in the future, this is the related issue so we can discuss and schedule it.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5796Databases -> Remote Access leaks IPs/servernames to customer2022-08-17T13:00:04ZZakDatabases -> Remote Access leaks IPs/servernames to customer## Problem
The "Remote Access" input field in the Database edit/add dialog leaks all IPs/servernames within the "ISPConfig network" to the user - regardless of their function and their availability to the user. Furthermore it will disclo...## Problem
The "Remote Access" input field in the Database edit/add dialog leaks all IPs/servernames within the "ISPConfig network" to the user - regardless of their function and their availability to the user. Furthermore it will disclose IPs added by other users as well.
## environment
ISPConfig version: 3.1.15p2Jesse NorellJesse Norellhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5794SPF Wizard should allow include:2020-10-01T15:23:18ZTapio LehtonenSPF Wizard should allow include:Feature request:
The SPF Wizard should have include: -field or make it clear an include: can be written to a hostname field.Feature request:
The SPF Wizard should have include: -field or make it clear an include: can be written to a hostname field.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5783Confusing "Document Root" line in Web Domain2020-10-08T17:53:27ZWolfram StraussConfusing "Document Root" line in Web DomainThe line **Document Root:** in _Web Domain - Domain_ (of the form /var/www/clients/clientX/webY) is confusing as it is really the home directory (as configured in /etc/passwd) for the user. The document root (as in the sense of the apach...The line **Document Root:** in _Web Domain - Domain_ (of the form /var/www/clients/clientX/webY) is confusing as it is really the home directory (as configured in /etc/passwd) for the user. The document root (as in the sense of the apache webserver's DocumentRoot) is /var/www/clients/client0/web37/web (configured in /etc/apache2/sites-enabled/XXX-domain.vhost).
I'd suggest to clarify the naming and maybe list the both, home directory and document root.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5745Add an option to disable access.log for ispconfig.vhost2021-03-09T15:12:02ZTill BrehmAdd an option to disable access.log for ispconfig.vhostAdd an option to disable access.log for ispconfig.vhostAdd an option to disable access.log for ispconfig.vhosthttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5733add vhost aliasdomains and vhost subdomains to parent domain drop-down li...2020-09-14T10:36:04Zleeadd vhost aliasdomains and vhost subdomains to parent domain drop-down lists.title says it all really.
can't add aliasdomains to an existing vhost subdomain because the vhost subdomain isn't listed in parent domain list.
makes it awkward for dev/staging wordpress sites using multi-lingual plugins on differen...title says it all really.
can't add aliasdomains to an existing vhost subdomain because the vhost subdomain isn't listed in parent domain list.
makes it awkward for dev/staging wordpress sites using multi-lingual plugins on different domains.
wordpress needs the 2nd domain to be an alias.
it can be done creating the dev / staging site as a complete standalone site, but it would be nice to keep dev / staging sites within the same folder structure with access via the same ftp/ssh user account.
we have multiple clients wanting to be able do this.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5727CSP generator2020-09-08T18:05:10ZThomCSP generatorWe could add a CSP generator (like https://report-uri.com/home/generate), so users can easily create and manage their CSP record.We could add a CSP generator (like https://report-uri.com/home/generate), so users can easily create and manage their CSP record.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5726Feature request: automatically add trailing . at the end of fqnd domains if i...2020-09-18T19:22:42ZRein van 't VeerFeature request: automatically add trailing . at the end of fqnd domains if it is some other than the main domainI think it would be awesome to add the trailing . at the end of fqdn when customers make the mistake of not including it.
Would it be possible to compare the last bit of the added record with the existing fqdn and add the trailing dot i...I think it would be awesome to add the trailing . at the end of fqdn when customers make the mistake of not including it.
Would it be possible to compare the last bit of the added record with the existing fqdn and add the trailing dot if it does not match?https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5724Reorder email module -> Email Accounts2020-10-08T18:29:35ZThomReorder email module -> Email AccountsI propose to reorder this list, place domain and domain alias at the bottom, and then set Email Mailbox as default tab, because that is usually the most used tab. What do you think?
![image](/uploads/afd3bb55055bbf4af46e6ac693cf19ad/ima...I propose to reorder this list, place domain and domain alias at the bottom, and then set Email Mailbox as default tab, because that is usually the most used tab. What do you think?
![image](/uploads/afd3bb55055bbf4af46e6ac693cf19ad/image.png)https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5722Add spam/junk functions from mailbox settings for mailusers2022-02-26T17:33:35ZThomAdd spam/junk functions from mailbox settings for mailusersThese settings should be available for mailusers:
![image](/uploads/5f69417379e7fb07b98ff3727ab857b3/image.png)These settings should be available for mailusers:
![image](/uploads/5f69417379e7fb07b98ff3727ab857b3/image.png)https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5721Suggestion: OpenStack integration to create new servers2020-09-03T19:05:41ZTony GSuggestion: OpenStack integration to create new serversFor an ISPConfig primary/master system to administer a secondary/slave, we need to manually install the new server, and manually install ISPConfig to define it as a secondary system. I propose an enhancement (addon?) where a new UI tab a...For an ISPConfig primary/master system to administer a secondary/slave, we need to manually install the new server, and manually install ISPConfig to define it as a secondary system. I propose an enhancement (addon?) where a new UI tab accepts parameters for spinning up a new server via OpenStack, and configuration of that server via Ansible. When done, the server should be ready to add into the network using normal ISPConfig settings.
If there is already a project to do this, please provide a link to related code or discussions. If not, I might try to tackle this in an addon.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5703Improve acme.sh settings2021-01-21T05:56:52ZPascal HerbertImprove acme.sh settingsthe integration of acme.sh is very nice. and the auto detection work very nice on one of my servers. 👍
we are using acme.sh on other systems for a while now and i want to suggest a few things, some could/should also work with certbot.
...the integration of acme.sh is very nice. and the auto detection work very nice on one of my servers. 👍
we are using acme.sh on other systems for a while now and i want to suggest a few things, some could/should also work with certbot.
- add optional support for ` --preferred-chain` that would allow usage of the DST Root after the [transitioning to ISRG's Root](https://letsencrypt.org/2019/04/15/transitioning-to-isrg-root.html)
(docs https://github.com/acmesh-official/acme.sh/wiki/Preferred-Chain) (certbot 1.6.0+)
- add support for setting keylength via UI, so the user could also select ec-256 etc. (see https://github.com/acmesh-official/acme.sh/blob/ddc91ce7c35679c95209137cfc37a1835f369abc/acme.sh#L6467). When the domain key is an ec-*-key the parameter --ecc is needed
I would add both options as a global option under "system" > "server config" > "web" > "ssl settings"
if you are interested in adding these settings, I will try to make a patch for that.https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5699Drop Webalizer support from ISPConfig2020-08-17T18:25:47ZMichaelDrop Webalizer support from ISPConfigWebalizer is quite old and it is not actively developed anymore.
So, after the implementation of GoAccess I would like to suggest to drop the support of Webalizer, maybe for the next milestone which would be ISPConfig 3.3?Webalizer is quite old and it is not actively developed anymore.
So, after the implementation of GoAccess I would like to suggest to drop the support of Webalizer, maybe for the next milestone which would be ISPConfig 3.3?