ISPConfig 3.1.15p1 and Debian 8.11 no login

Discussion in 'General' started by HansDinges, Oct 13, 2019.

  1. HansDinges

    HansDinges New Member HowtoForge Supporter

    Yesterday i updated to ISPConfig 3.1.15p1. Now i have the problem (i had this problem a few times before) that i can't login to the ISPconfig admin panel. i enter user and password and it jumps back to the login screen. the auth.log shows me a 'successful login from.....' but the broeser inspector shows me:
    Failed to load resource: the server responded with a status of 404 (Not Found)
    :8080/login/nav.php?nav=side:1
    Failed to load resource: the server responded with a status of 404 (Not Found)
    :8080/login/nav.php?nav=top:1
    Failed to load resource: the server responded with a status of 404 (Not Found)
    :8080/login/keepalive.php:1
    Failed to load resource: the server responded with a status of 404 (Not Found)
    :8080/login/datalogstatus.php:1
    and so on...

    i cleared the browser cache, restarted the webserver, completele cleared the table sys_session, deleted all session files from /usr/local/ispconfig/interface/temp - nothing helped.

    i'm running Debian 8.11 on this server (vmware VM). could this be the reason? But the updater had no problems (stable) and didn't told me anything about my 'old' distribution.
    so i still can't login. please help.
     
  2. Taleman

    Taleman Well-Known Member HowtoForge Supporter

  3. HansDinges

    HansDinges New Member HowtoForge Supporter

    • we don't use email nor dns in this ispconfig installation
    • all websites are running normally
    it's just the login to the config panel.
    • it is not a wrong password. if i insert a real wrong passwort, i get a message that the password is wrong. but the problem here is, that nothing happens. just reloading the login screen.
    here is the output of systemctl --state=failed
    Code:
    UNIT                LOAD   ACTIVE SUB    DESCRIPTION
    ● php-7.1-fpm.service loaded failed failed The PHP 7.1 FastCGI Process Manager
    ● php-7.2-fpm.service loaded failed failed The PHP 7.2 FastCGI Process Manager
    
    LOAD   = Reflects whether the unit definition was properly loaded.
    ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
    SUB    = The low-level unit activation state, values depend on unit type.
    
    2 loaded units listed. Pass --all to see loaded but inactive units, too.
    To show all installed unit files use 'systemctl list-unit-files'.
    here is the htf_report.txt
    Code:
    ##### SERVER #####
    IP-address (as per hostname): ***.***.***.***
    IP-address(es) (as per ifconfig): ***.***.***.***
    [INFO] OS version is Debian GNU/Linux 8.11 (jessie)
     
    [INFO] ISPConfig is installed.
    
    ##### ISPCONFIG #####
    ISPConfig version is 3.1.15p1
    
    
    ##### VERSION CHECK #####
    
    [INFO] php (cli) version is 5.6.40-0+deb8u6
    [INFO] php-cgi (used for cgi php in default vhost!) is version 5.6.40-0+deb8u6
    
    ##### PORT CHECK #####
    
    
    ##### MAIL SERVER CHECK #####
    
    
    ##### RUNNING SERVER PROCESSES #####
    
    [INFO] I found the following web server(s):
        Apache 2 (PID 13302)
    [INFO] I found the following mail server(s):
        Unknown process (smtpd) (PID 8745)
    [INFO] I found the following pop3 server(s):
        Dovecot (PID 27387)
    [INFO] I found the following imap server(s):
        Unknown process (init) (PID 1)
    [INFO] I found the following ftp server(s):
        PureFTP (PID 27537)
    
    ##### LISTENING PORTS #####
    Server)        ()
    Local        (Address)
    ***.***.***.***:53        (27547/named)
    [localhost]:53        (27547/named)
    [anywhere]:21        (27537/pure-ftpd)
    [anywhere]:22        (928/sshd)
    [localhost]:953        (27547/named)
    [anywhere]:25        (8745/smtpd)
    [anywhere]:36602        (935/xinetd)
    ***.***.***.***:2812        (931/monit)
    [anywhere]:36607        (675/rpc.statd)
    [anywhere]:993        (1/init)
    [anywhere]:995        (27387/dovecot)
    [localhost]:10024        (12145/amavisd-new)
    [localhost]:10025        (26768/master)
    [localhost]:10026        (12145/amavisd-new)
    [anywhere]:48362        (-)
    [localhost]:10027        (26768/master)
    [anywhere]:587        (26768/master)
    [localhost]:11211        (802/memcached)
    [anywhere]:110        (27387/dovecot)
    [anywhere]:143        (1/init)
    [anywhere]:111        (664/rpcbind)
    [anywhere]:10000        (1969/perl)
    [anywhere]:465        (26768/master)
    *:*:*:*::*:53        (27547/named)
    *:*:*:*::*:21        (27537/pure-ftpd)
    *:*:*:*::*:4949        (1123/perl)
    *:*:*:*::*:22        (928/sshd)
    *:*:*:*::*:953        (27547/named)
    *:*:*:*::*:25        (8745/smtpd)
    *:*:*:*::*:51737        (675/rpc.statd)
    *:*:*:*::*:443        (13302/apache2)
    *:*:*:*::*:993        (1/init)
    *:*:*:*::*:995        (27387/dovecot)
    *:*:*:*::*:10024        (12145/amavisd-new)
    *:*:*:*::*:10026        (12145/amavisd-new)
    *:*:*:*::*:3306        (26411/mysqld)
    *:*:*:*::*:587        (26768/master)
    [localhost]10        (27387/dovecot)
    [localhost]43        (1/init)
    *:*:*:*::*:57263        (-)
    [localhost]11        (664/rpcbind)
    *:*:*:*::*:8080        (13302/apache2)
    *:*:*:*::*:80        (13302/apache2)
    *:*:*:*::*:8081        (13302/apache2)
    *:*:*:*::*:465        (26768/master)
    
    
    
    
    ##### IPTABLES #####
    Chain INPUT (policy ACCEPT)
    target     prot opt source               destination         
    fail2ban-postfix-sasl  tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 25
    fail2ban-dovecot-pop3imap  tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 110,995,143,993
    fail2ban-pureftpd  tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 21
    fail2ban-ssh-ddos  tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 22
    fail2ban-ssh  tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 22
    
    Chain FORWARD (policy ACCEPT)
    target     prot opt source               destination         
    
    Chain OUTPUT (policy ACCEPT)
    target     prot opt source               destination         
    
    Chain fail2ban-dovecot-pop3imap (1 references)
    target     prot opt source               destination         
    RETURN     all  --  [anywhere]/0            [anywhere]/0           
    
    Chain fail2ban-postfix-sasl (1 references)
    target     prot opt source               destination         
    RETURN     all  --  [anywhere]/0            [anywhere]/0           
    
    Chain fail2ban-pureftpd (1 references)
    target     prot opt source               destination         
    RETURN     all  --  [anywhere]/0            [anywhere]/0           
    
    Chain fail2ban-ssh (1 references)
    target     prot opt source               destination         
    REJECT     all  --  ***.***.***.***      [anywhere]/0            reject-with icmp-port-unreachable
    REJECT     all  --  ***.***.***.***       [anywhere]/0            reject-with icmp-port-unreachable
    RETURN     all  --  [anywhere]/0            [anywhere]/0           
    
    Chain fail2ban-ssh-ddos (1 references)
    target     prot opt source               destination         
    RETURN     all  --  [anywhere]/0            [anywhere]/0           
    
    
    
    i wonder what that means??

    Code:
    Object
    :8080/login/dashboard/dashboard.php:1 Failed to load resource: the server responded with a status of 404 (Not Found)
    :8080/login/nav.php?nav=side:1 Failed to load resource: the server responded with a status of 404 (Not Found)
    :8080/login/nav.php?nav=top:1 Failed to load resource: the server responded with a status of 404 (Not Found)
    :8080/login/keepalive.php:1 Failed to load resource: the server responded with a status of 404 (Not Found)
    :8080/login/datalogstatus.php:1 Failed to load resource: the server responded with a status of 404 (Not Found)
     
  4. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    How was this update done?
    Are there any error messages in any log files?
     
  5. HansDinges

    HansDinges New Member HowtoForge Supporter

    i use the ispconfig_update.sh script. no errors. no special settings. i allways answer with the default yes/no. it means i just hit a few times enter and then it's done.
    a hour ago i made the update again.
    Code:
    cd /tmp
    wget http://www.ispconfig.org/downloads/ISPConfig-3.1.15p1.tar.gz
    tar xvfz ISPConfig-3.1.15p1.tar.gz
    cd ispconfig3_install/install
    php -q update.php
    and again no errors. all things completed successfully
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    That's ok and not an error or to be more precise, it's not related to your problem.

    To your login problem: delete cookies in browser and browser cache. if this does not help, run a repair with phpmyadmin on all tables in the dbispconfig database, it might be that your session table is corrupted.
     
  7. HansDinges

    HansDinges New Member HowtoForge Supporter

    No success
    In Chrome i deleted everything. On a Mac 'Shift+Command+Backspace' then i click 'all' for 'all time'
    after that i ran...
    output
    Code:
    mysqlcheck -r -p dbispconfig
    Enter password:
    dbispconfig.aps_instances                          OK
    dbispconfig.aps_instances_settings                 OK
    dbispconfig.aps_packages                           OK
    dbispconfig.aps_settings                           OK
    dbispconfig.attempts_login                         OK
    dbispconfig.client                                 OK
    dbispconfig.client_circle                          OK
    dbispconfig.client_message_template                OK
    dbispconfig.client_template                        OK
    dbispconfig.client_template_assigned               OK
    dbispconfig.country                                OK
    dbispconfig.cron                                   OK
    dbispconfig.directive_snippets                     OK
    dbispconfig.dns_rr                                 OK
    dbispconfig.dns_slave                              OK
    dbispconfig.dns_soa                                OK
    dbispconfig.dns_ssl_ca
    note     : The storage engine for the table doesn't support repair
    dbispconfig.dns_template                           OK
    dbispconfig.domain                                 OK
    dbispconfig.firewall                               OK
    dbispconfig.ftp_traffic                            OK
    dbispconfig.ftp_user                               OK
    dbispconfig.help_faq                               OK
    dbispconfig.help_faq_sections                      OK
    dbispconfig.iptables                               OK
    dbispconfig.mail_access                            OK
    dbispconfig.mail_backup                            OK
    dbispconfig.mail_content_filter                    OK
    dbispconfig.mail_domain                            OK
    dbispconfig.mail_forwarding                        OK
    dbispconfig.mail_get                               OK
    dbispconfig.mail_mailinglist                       OK
    dbispconfig.mail_relay_recipient                   OK
    dbispconfig.mail_traffic                           OK
    dbispconfig.mail_transport                         OK
    dbispconfig.mail_user                              OK
    dbispconfig.mail_user_filter                       OK
    dbispconfig.monitor_data                           OK
    dbispconfig.openvz_ip                              OK
    dbispconfig.openvz_ostemplate                      OK
    dbispconfig.openvz_template                        OK
    dbispconfig.openvz_traffic                         OK
    dbispconfig.openvz_vm                              OK
    dbispconfig.remote_session                         OK
    dbispconfig.remote_user                            OK
    dbispconfig.server                                 OK
    dbispconfig.server_ip                              OK
    dbispconfig.server_ip_map                          OK
    dbispconfig.server_php                             OK
    dbispconfig.shell_user                             OK
    dbispconfig.software_package                       OK
    dbispconfig.software_repo                          OK
    dbispconfig.software_update                        OK
    dbispconfig.software_update_inst                   OK
    dbispconfig.spamfilter_policy                      OK
    dbispconfig.spamfilter_users                       OK
    dbispconfig.spamfilter_wblist                      OK
    dbispconfig.support_message                        OK
    dbispconfig.sys_config                             OK
    dbispconfig.sys_cron                               OK
    dbispconfig.sys_datalog                            OK
    dbispconfig.sys_dbsync                             OK
    dbispconfig.sys_filesync                           OK
    dbispconfig.sys_group                              OK
    dbispconfig.sys_ini                                OK
    dbispconfig.sys_log                                OK
    dbispconfig.sys_remoteaction                       OK
    dbispconfig.sys_session                            OK
    dbispconfig.sys_theme                              OK
    dbispconfig.sys_user                               OK
    dbispconfig.web_backup                             OK
    dbispconfig.web_database                           OK
    dbispconfig.web_database_user                      OK
    dbispconfig.web_domain                             OK
    dbispconfig.web_folder                             OK
    dbispconfig.web_folder_user                        OK
    dbispconfig.web_traffic                            OK
    dbispconfig.webdav_user                            OK
    dbispconfig.xmpp_domain                            OK
    dbispconfig.xmpp_user                              OK
    which logfile is the best for investigating this behaviour?
    thank you..
     
  8. till

    till Super Moderator Staff Member ISPConfig Developer

    There is an auth log:

    tail /var/log/ispconfig/auth.log
     
  9. HansDinges

    HansDinges New Member HowtoForge Supporter

    yes. i mentioned this log in my first post. all logins are logged as 'successful'.
     
  10. till

    till Super Moderator Staff Member ISPConfig Developer

    Sorry, I missed that info. The next step is to have a look at the sys_session table in the dbispconfig database, does it contain a session with the session_id of the last successful login from the log file?
     
  11. HansDinges

    HansDinges New Member HowtoForge Supporter

    No. In this table there's no single record. And this is since years like this. I don't know why, but all sessions are stored as files in /usr/local/ispconfig/interface/temp
    But it worked fine like this. Really since years.
    and every time i log in. there are two new files in this folder.
     

    Attached Files:

  12. till

    till Super Moderator Staff Member ISPConfig Developer

    Ok, then the problem might be the session storage as the login seems to be successful but then your system loses the session so you get logged out automatically. From which ISPConfig version did you update to 3.1.15p1 ?
     
  13. Hi HansDinges i have the same issues... you need to change the wrong file permissions from the DNS CAs stuff

     
  14. HansDinges

    HansDinges New Member HowtoForge Supporter

    Hi Bernhard,
    i would like to try. Could you give me an advice what you exactly mean?
    Thank you...
    I'm not totally shure from which version i updated. But i run updates every 1-2 monts. So i think it was the last before 3.1.15p1
     
  15. till

    till Super Moderator Staff Member ISPConfig Developer

    Ok, just asked to narrow it down which changes might affect this. One thing that you can try is to revert the ispconfig.vhost file from the backup, the backup that is made during update should be in /var/backup folder, it contains a file etc.tar.gz and this archive contains the backup of the file /etc/apache2/sites-available/ispconfig.vhost which you can try to restore.
     
  16. HansDinges

    HansDinges New Member HowtoForge Supporter

    i restored the ispconfig.vhost file, deleted the session files in /usr/local/ispconfig/interface/temp and restarted apache.
    no success :-(
    the files are slightly different. left before update, right after.
    ...do you know what bernhard means with:
     

    Attached Files:

  17. till

    till Super Moderator Staff Member ISPConfig Developer

    That#s why I suggested trying to use the old vhost file, the new file uses stricter settings.

    No, not really. Maybe he meant CAA, but thats not files, its DNS. CAA basically sets which SSL authority is allowed for a given domain, but if the CAA would be wrong, the browser would not even show you the login form. So I guess Bernhard means something else.
     
  18. HansDinges

    HansDinges New Member HowtoForge Supporter

    is there a possibility to backup and restore the complete ispconfig sites/settings/etc. to a new server without having access to the webinterface?
    will i have 'big' problems when switching from debian 8.11 to debian 10?
     
  19. Jesse Norell

    Jesse Norell Well-Known Member

    Yes, in fact the web interface isn't used at all for restoring such a backup. You would need to restore the ispconfig directory/files, some config files (not all of /etc, just config for apache/nginx, postfix, etc), merge web* users/groups in the passwd and group files, and restore data (websites, mail, and databases). There are specific steps to be found is other futon posts here.
    If you restore all the old data and config correctly, then update from the latest git-stable and let the installer reconfigure services, you'd be pretty good. Afterwards you will need to update the default php settings (I think in System > Config) and Resync everything. Keep your backups on hand and make server snapshots at various points if you can, and it will be quick to restore to an older point if you find you missed an earlier step.
     

Share This Page