ISPConfig Buster

Discussion in 'Installation/Configuration' started by Chrys, Sep 10, 2019.

  1. Chrys

    Chrys New Member

    I have upgraded my debian server from Stretch to Buster. Upon doing so I ISP Config ceased working. I have uninstalled and reinstalled all the dependant applications yet I get the following when installing the php script which is odd as I have installed them many times over including their configurations.

    [INFO] service Apache not detected
    [INFO] service nginx not detected
    [INFO] service Postgrey not detected
    [INFO] service Postfix not detected
    [ERROR] Postfix not installed - skipping Mail
    [INFO] service Jailkit not detected
    [INFO] service pureftpd not detected
    [INFO] service BIND not detected
    [INFO] service MyDNS not detected
    [INFO] service OpenVZ not detected
    [INFO] service Ubuntu Firewall not detected
    [INFO] service Bastille Firewall not detected
    [INFO] service Metronome XMPP Server not detected
    Configuring Fail2ban
    Installing ISPConfig
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Either you don't run the ISPConfig updater as root or you became root user with 'su' but the correct command on debian 10 is 'su -', if you would have used su, then no programs will be found by Linux which command as the path variable is set wrong by the su command then and it does not include the system paths.
     
  3. Chrys

    Chrys New Member

    Had absolutely no idea of su - !
    Anyway I did that and installation went through but ISPconfig is inaccessible and browser directs page to the Apache 2 Debian Default Page.
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    But you were using port 8080 to access ispconfig and you entered port 8080 during ispconfig update when the updater asked you? Reinstalling the services as you did might messed up the system quite a lot. You should go trough Debian perfect server guide step by step to ensure that all packages are installed.
     
  5. MikySal78

    MikySal78 New Member

    i have update debian stretch to buster on sistem multiserver...all ok, bat on mail server run php -q update.php anche see this error:

    Configuring Postfix
    Configuring Dovecot
    Creating new DHParams file, this takes several minutes. Do not interrupt the script.
    142+0 record dentro
    142+0 record fuori
    142 bytes copied, 0,000295352 s, 481 kB/s
    unable to load DH parameters
    140294286128256:error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong tag:../crypto/asn1/tasn_dec.c:1130:
    140294286128256:error:0D07803A:asn1 encoding routines:asn1_item_embed_d2i:nested asn1 error:../crypto/asn1/tasn_dec.c:290:Type=DHparams

    Configuring Mailman
    Configuring Spamassassin
    Configuring Amavisd
    Configuring Getmail
    Configuring Ubuntu Firewall
    Configuring Database
    Updating ISPConfig

    webmail is ok, thunderbird no!
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Create a new DHParams file with:

    openssl dhparam -out /etc/dovecot/dh.pem 2048

    and restart dovecot.
     
    Richard Foley and MikySal78 like this.
  7. MikySal78

    MikySal78 New Member

    perfect!
    Thanks
     
  8. ahrasis

    ahrasis Well-Known Member

    I think this dhparams file is for pure-ftpd-mysql, which if it is already created, you could use via symlink or directly for other services like for dovecot and web. There is no necessity to create one dhparams file for each services.
     
  9. till

    till Super Moderator Staff Member ISPConfig Developer

    No, its for dovecot. The ispconfig updater tried to convert the file of the old dovecot version and this failed as the old file seems to be corrupted, therefore he had to create a new dhparams file for dovecot.
     
  10. MikySal78

    MikySal78 New Member

    I see this error mail...

    [email protected]:log # tail -f mail.err
    Sep 13 01:53:20 srv dovecot: auth: Error: auth worker: Aborted PASSV request for [email protected]: Internal auth worker failure
    Sep 13 01:53:20 srv dovecot: auth-worker(781): Error: sql([email protected],185.30.xxx.xxx,<kx+a12OStIG5HrGh>): Password query failed: Not connected to database
    Sep 13 01:53:20 srv dovecot: auth-worker(782): Error: mysql(localhost): Connect failed to database (dbispconfig): Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2) - waiting for 1 seconds before retry

    i check /etc/dovecot/dovecot-sql.conf, user and password ok.
    because error?
     
  11. till

    till Super Moderator Staff Member ISPConfig Developer

    No, that's not related to the dhparams error. Maybe you disabled networking in mariadb?

    Test the mysql connection with this exact command:

    mysql -h localhost -u ispconfig -p

    and then enter the password from dovecot-swl.conf file.
     
  12. MikySal78

    MikySal78 New Member

    Yes, not related with dhparms.
    No, i not disabled network in mariadb, from update i keep config mariadb server.
    Yes, connect!
    I don't understand the error
     
  13. Chrys

    Chrys New Member

    Still unable to have a working machine given that I get errors from apache mysql etc. Is there any way I can start from scratch without going through my inherently complex debian reinstallation. As a reminder I have upgraded from stretch to my current buster system without using su instead of su -.
     
  14. Chrys

    Chrys New Member

    Given that I want to work with ssl and tls ports on my emaill server i have obtained the SSL certificates and adapted postfix and dovecot accordingly using this methodology https://www.server-world.info/en/note?os=Debian_10&p=mail&f=6, instead of going through ISPConfig even though it is fully installed. Would it be possible to maintain both systems in parallel? if not how can I use port 993 and 587 using ISPConfig alone?
     
  15. ahrasis

    ahrasis Well-Known Member

  16. Chrys

    Chrys New Member

    Thanks Ahrasis. Should I reinstall postfix and dovecot then, with deletion of their configurations, or should I just update ispconfig which will override their conflicting configurations automatically?
     
  17. till

    till Super Moderator Staff Member ISPConfig Developer

    If it works now, then leave it as it is.
     
  18. Chrys

    Chrys New Member

    yes it works. Only Roundcube is giving me smtp errors 250.
     
  19. Chrys

    Chrys New Member

    By way of background this setup is being used primarily for a law firm's email server. For any law firm, security and privacy is paramount to anything else not because we have anything to hide but because client information is always very sensitive and may have major financial impact. So for us, functionality and features are a long distant second to security, privacy and resilience ie high availability. Thus we cannot opt for a service like google or ms365 for simply lack of trust.
     
  20. Chrys

    Chrys New Member

    On a clean install, we want to you secure ssl linked mail using ports 993 and 587 but the standard installation only allows 110 and 25 ports connections. Is there any way to force postfix and dovecot to listen to these ports using the ssl certificates of ispconfig? I prefer not to overcomplicate and use certbot which is difficult to set up.
     

Share This Page