ISPConfig 3.0.4.6 available

[grungy]

I can find /usr/local/ispconfig/server/lib/mysql_clientdb.conf
it contains

$clientdb_host                  = 'localhost';
$clientdb_user                  = 'root';
$clientdb_password              = 'PASSWORD1';

and I can login to mysql as user root with password PASSWORD1, but that was not the root password I setup initially. I can still login with both password for user root.

I did follow your instructions

cd /tmp
wget http://www.ispconfig.org/downloads/ISPConfig-3-stable.tar.gz
tar xvfz ISPConfig-3-stable.tar.gz
cd ispconfig3_install/install
php -q update.php

did not work

[grungy]

mysql> SELECT user,host,password FROM mysql.user WHERE user = 'root' ORDER BY host ASC;
+------+-------------------------------+-------------------------------------------+
| user | host                          | password                                  |
+------+-------------------------------+-------------------------------------------+
| root | %                                    | *E6-------------------------------------- |
| root | 127.0.0.1                         |  blank password                                 |
| root | remote.host1                    | *E6-------------------------------------- |
| root | remote.host2                    | *E6-------------------------------------- |
| root | localhost                           | *E6-------------------------------------- |
| root | localhost.localdomain         |  blank password                                |
+------+-------------------------------+-------------------------------------------+

[till]

There should never be a balnk password in mysql as it would allow to connect to your server without password e.g. trough phpmyadmin. Please set the same root password for all root users in mysql and set the same password in the file /usr/local/ispconfig/server/lib/mysql_clientdb.conf and restart mysql and redor the ispconfig update afterwards.

[grungy]

Originally Posted by till

There should never be a balnk password in mysql as it would allow to connect to your server without password e.g. trough phpmyadmin. Please set the same root password for all root users in mysql and set the same password in the file /usr/local/ispconfig/server/lib/mysql_clientdb.conf and restart mysql and redor the ispconfig update afterwards.

ok, will do that, FYI I did not set a blank password nor did I add something manually to mysql_clientdb.conf, this might be something related to all those ispconfig upgrades I do....

[till]

ok, will do that, FYI I did not set a blank password nor did I add something manually to mysql_clientdb.conf, this might be something related to all those ispconfig upgrades I do....

No, its not related to a ispconfig update.

The emüpty root password means that you have not set this password for all root users at the time you installed the mysql binary of the linux distribution and the password in the file /usr/local/ispconfig/server/lib/mysql_clientdb.conf is set once when you install ispconfig the first time, it is not altered by a ispconfig update. This file contains the password that you entered into the ispconfig installer when the installer asked for the mysql root password, if you alter the mysql root password in mysql at any later time, you have to update it in the file /usr/local/ispconfig/server/lib/mysql_clientdb.conf as well or ispconfig will not be able to install updates anymore or create client databases.

[grungy]

- /usr/local/ispconfig/server/lib/mysql_clientdb.conf has the correct password
- no more empty root passwords
- run the ispconfig update

the problem is still there

[till]

Then there must be a error logged to the global apache error.log.

[grungy]

Originally Posted by till

Then there must be a error logged to the global apache error.log.

yes you are right

PHP Warning:  exec() has been disabled for security reasons in /usr/local/ispconfig/interface/web/client/client_edit.php

in

/var/log/apache2/error.log

[grungy]

solved this error by adding

        php_admin_value suhosin.executor.func.blacklist "shell_exec"

to

/etc/apache2/sites-available/ispconfig.vhost

so when I do an upgrade this entry will be gone I now remember this happened once before