Initial config with new server, domain and 2 IP adresses

[eddie-prefere]

Hello Till,

Just wanted to let you know that i really did buy the manual
(LowestPrices@InternetBillingCenter.net - Date: 2011-09-21)

and either i've done somehing wrong;, or ISPConfig is buggy.

1.) I am wondering if it takes more than a minute for ISP config to write modifications - there were times I made modiications in ISPConfig and then rebooted the server after only a minute or two - could this have caused problems?

2.) Does it matter whether I creat a dns zone file first and then a website for a domain - or vice-versa? Is order important her?

3.) Is it a known problem that fast_CGI - the default - will not allow squirrelmail with postfix and courier to work properly?

4.) Is it a known problem that once a dns zone and website have been setup that a change in the type of PHP will cause errors when trying to login to squirrelmail - an inability to login ? And, if so, is there a fix?

Thanks,

I've got to get this thing right and i've been at it 3 days of 12 hoiurs and can't find another pos with the exact same problem.

Would you recommend removing squirrelmail and the re-installing it? Could I do this without touching postfix or courier?


Best

Eddie

[falko]

Originally Posted by eddie-prefere

1.) I am wondering if it takes more than a minute for ISP config to write modifications - there were times I made modiications in ISPConfig and then rebooted the server after only a minute or two - could this have caused problems?

If the shut down was executed the moment the ISPConfig backend process ran, the backend process might have been cut in the middle, so yes, this could have caused problems. Please check if the /usr/local/ispconfig/server/temp/.ispconfig_lock exists - if so, either there is a backend process running currently, or it is a remainder from an interrupted backend process. If it is till there after a few seconds, it probably is a remainder, and you can delete it. The next time the backend process runs, it should catch up on everything.

Originally Posted by eddie-prefere

2.) Does it matter whether I creat a dns zone file first and then a website for a domain - or vice-versa? Is order important her?

No. It's only important when you register a domain - the zone should exist before you register a domain because otherwise you will get a warning from the registry.

[eddie-prefere]

OK, I am giving ISPConfig time to make its changes before rebooting.

I am still having the same problem trying to get webmail login with http://domain.com/webmail, and there is a brower security popup - instead of the login page - I have just tried to install phpmyadmin, and have created an alias and <Directory> entry in the /etc/apache2/sites-available file for the main domain, and when I try to get that page, I receive the same security popup asking me if I want ot download the "phpmyadmin" file.

SO, there is something going on here that I don't understand. Is it a permissions problem for accessing the page domain.com/webmail and domain.com/phpmyadmin? If so, what is the recommended fix? "chmod 755 /etc/apache2/sites-available/domain.com/webmail - for each of them and "chmod 755 for /etc/apache2/sites-available/domain.com vhost/phpmyadmin" OR would it be
"chmod 755 for /etc/apache2/sites-available/domain.com/phpmyadmin"


I really don't get how to make this work. Any help is truly appreciated. I saw that no-one answered another member who asked about this problem. I don't know why.

Thanks,

Eddie

[falko]

The phpMyAdmin and SquirrelMail configuration files for Apache must be in the /etc/apache2/conf.d directory.

Is mod_php enabled for the websites from which you try to access phpMyAdmin/SquirrelMail?

[eddie-prefere]

Hello,

Thanks for your advice. I have done extensive testing and have the following problems:

1. Squirrelmail, phpMyAdmin and phpPgAdmin at domain.com/squirrelmail, domain.com/phpMyAdmin and domain.com/phppgadmin ONLY show a login screen in sites that are set as MOD_PHP and NEVER show a login screen for sites that are set in ISPConfig3 as FastCGI.

2. To get the mod_php sites to show a login screen I had to make the following changes:

in /etc/phpmyadmin/config.inc.php I had to add the line:
$cfg['PmaAbsoluteUri'] = 'http://localhost/phpmyadmin';

in /etc/phppgadmin/config.inc.php I had to modify the 'host' value to be 'localhost'

3. When I try to access the login for any of the 3, squirrelmail, phpmyadmin or phppgadmin, at sites which are set to FastCGI I get no login screen, and a file is trying to download. In squirrelmail I also get the following error message:

Error opening .../config/default_pref
Could not create initial preference file
/var/lib/squirrelmail/data should be writeable by user www-data

And most strange of all, in my /etc/apache2/conf.d directory I have entries for phppgadmin and squirrelmail:

phppgadmin@
squirrelmail.conf@

but NO entry for phpmyadmin.

I am able to successfully login to squirrelmail, phpmyadmin and phppgadmin on MOD_PHP sites.

4. In my /etc/apache2/conf.d/squirrelmail.conf file I have:

Alias /squirrelmail /usr/share/squirrelmail
Alias /webmail /usr/share/squirrelmail

and I have:

<Files configtest.php
deny from all
allow from 127.0.0.1 etc


everything else looks OK

5. In my /etc/apache2/conf.d/phppgadmin file I have:

Alias /phppgadmin /usr/share/phppgadmin


and


#deny from all
allow from 127.0.0.0/255.0.0.0 ::1/128
#allow from all

Can you make any sense of this and give me any advice, please. I do want to use FastCGI on some sites.

Thank you very much,

Eddie

[falko]

Thanks for the detailed report. I've added this to our bugtracker.

[falko]

Are you sure that phpMyAdmin doesn't work under FastCGI? For me it works out of the box under all PHP modes with the following configuration in /etc/apache2/conf.d/phpmyadmin.conf:

# phpMyAdmin default Apache configuration

Alias /phpmyadmin /usr/share/phpmyadmin

<Directory /usr/share/phpmyadmin>
        Options FollowSymLinks
        DirectoryIndex index.php

        <IfModule mod_php5.c>
                AddType application/x-httpd-php .php

                php_flag magic_quotes_gpc Off
                php_flag track_vars On
                php_flag register_globals Off
                php_admin_flag allow_url_fopen Off
                php_value include_path .
                php_admin_value upload_tmp_dir /var/lib/phpmyadmin/tmp
                php_admin_value open_basedir /usr/share/phpmyadmin/:/etc/phpmyadmin/:/var/lib/phpmyadmin/
        </IfModule>

</Directory>

# Authorize for setup
<Directory /usr/share/phpmyadmin/setup>
    <IfModule mod_authn_file.c>
    AuthType Basic
    AuthName "phpMyAdmin Setup"
    AuthUserFile /etc/phpmyadmin/htpasswd.setup
    </IfModule>
    Require valid-user
</Directory>

# Disallow web access to directories that don't need it
<Directory /usr/share/phpmyadmin/libraries>
    Order Deny,Allow
    Deny from All
</Directory>
<Directory /usr/share/phpmyadmin/setup/lib>
    Order Deny,Allow
    Deny from All
</Directory>

SquirrelMail works under mod_php; for FastCGI and suPHP, I had to modify /etc/apache2/conf.d/squirrelmail.conf as follows:

Alias /squirrelmail /usr/share/squirrelmail
Alias /webmail /usr/share/squirrelmail

<Directory /usr/share/squirrelmail>
  Options FollowSymLinks
  <IfModule mod_php5.c>
    AddType application/x-httpd-php .php
    php_flag magic_quotes_gpc Off
    php_flag track_vars On
    php_admin_flag allow_url_fopen Off
    php_value include_path .
    php_admin_value upload_tmp_dir /var/lib/squirrelmail/tmp
    php_admin_value open_basedir /usr/share/squirrelmail:/etc/squirrelmail:/var/lib/squirrelmail:/etc/hostname:/etc/mailname
    php_flag register_globals off
  </IfModule>
  <IfModule mod_dir.c>
    DirectoryIndex index.php
  </IfModule>

  # access to configtest is limited by default to prevent information leak
  <Files configtest.php>
    order deny,allow
    deny from all
    allow from 127.0.0.1
  </Files>
</Directory>

(Despite these changes, it doesn't work under CGI + suExec (CGI without suExec does work), but you don't use this mode.)

Create /var/lib/squirrelmail/tmp and make it writable for the www-data user...

mkdir /var/lib/squirrelmail/tmp
chown www-data /var/lib/squirrelmail/tmp

... and reload Apache:

/etc/init.d/apache2 reload