ispconfig upgrade to 3.0.5.1 [broken ispconfig interface]

Discussion in 'General' started by Snowman, Mar 1, 2013.

  1. Snowman

    Snowman Member

    Hi folks,
    i've recently checked howtoforge forums and realized that there is a problem with ispconfig upgrade to 3.0.5.4. Everythink works as intended, but ispconfig interface on 8080 port has a problem with FCGI.

    [Fri Mar 01 14:49:39 2013] [warn] [client 217.5.72.98] (104)Connection reset by peer: mod_fcgid: error reading data from FastCGI server
    [Fri Mar 01 14:49:39 2013] [error] [client 217.5.72.98] Premature end of script headers: index.php

    I found solution on forums to change the /etc/apache2/sites-enabled/000-ispconfig.vhost and uncomment <IfModule mod_php5.c> section and comment <IfModule mod_fcgid.c> section,

    unfortunately it don't work for me (files are owned by ispconfig:ispconfig user and group)

    [Fri Mar 01 14:52:32 2013] [error] [client 217.5.72.98] PHP Warning: require_once(/usr/local/ispconfig/interface/lib/config.inc.php): failed to open stream: Permission denied in /usr/local/ispconfig/interface/web/index.php on line 31
    [Fri Mar 01 14:52:33 2013] [error] [client 217.5.72.98] PHP Fatal error: require_once(): Failed opening required '../lib/config.inc.php' (include_path='.:/usr/share/php:/usr/share/pear') in /usr/local/ispconfig/interface/web/index.php on line 31
    [Fri Mar 01 14:52:34 2013] [error] [client 217.5.72.98] PHP Warning: require_once(/usr/local/ispconfig/interface/lib/config.inc.php): failed to open stream: Permission denied in /usr/local/ispconfig/interface/web/index.php on line 31
    [Fri Mar 01 14:52:34 2013] [error] [client 217.5.72.98] PHP Fatal error: require_once(): Failed opening required '../lib/config.inc.php' (include_path='.:/usr/share/php:/usr/share/pear') in /usr/local/ispconfig/interface/web/index.php on line 31
    [Fri Mar 01 14:52:35 2013] [error] [client 217.5.72.98] PHP Warning: require_once(/usr/local/ispconfig/interface/lib/config.inc.php): failed to open stream: Permission denied in /usr/local/ispconfig/interface/web/index.php on line 31
    [Fri Mar 01 14:52:35 2013] [error] [client 217.5.72.98] PHP Fatal error: require_once(): Failed opening required '../lib/config.inc.php' (include_path='.:/usr/share/php:/usr/share/pear') in /usr/local/ispconfig/interface/web/index.php on line 31

    When I am using FCGI, /var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter contains : (/usr/bin/php-cgi is symlink to /etc/alternatives/php-cgi)
    #!/bin/sh
    PHPRC=/etc/php5/cgi/
    export PHPRC
    export PHP_FCGI_MAX_REQUESTS=5000
    export PHP_FCGI_CHILDREN=1
    exec /usr/bin/php-cgi -d magic_quotes_gpc=off -d session.save_path=/usr/local/ispconfig/server/temp

    I will be happy to hear ideas and helpful solutions :).

    Thanks,
    Martin
     
  2. till

    till Super Moderator

    There is no ispconfig 3.0.5.4 version yet, the latest version is 3.0.5.1. If you installed 3.0.5, then please update to 3.0.5.1 which fixes all known isues with inaccessability of the interface after an update, choose to reconfigure services during update.

    If the update to 3.0.5.1 did not fix the issue, then there must be a package mission on your server. Which Linux distribution do you use?
     
  3. Snowman

    Snowman Member

    Sorry, I've installed 3.0.5.1 (last stable). I am using Debian Squeeze server. Before the upgrade I had 3.0.4.2 i think.

    Right now I've downloaded stable package again. And re-run-ed the command "php -q update.php"

    >> Update

    Operating System: Debian 6.0 (Squeeze/Sid) or compatible

    This application will update ISPConfig 3 on your server.

    Shall the script create a ISPConfig backup in /var/backup/ now? (yes,no) [yes]:

    Creating backup of "/usr/local/ispconfig" directory...
    Creating backup of "/etc" directory...
    Checking ISPConfig database .. OK
    Starting incremental database update.
    Reconfigure Permissions in master database? (yes,no) [no]:

    Reconfigure Services? (yes,no) [yes]:

    Configuring Postfix
    Configuring Mailman
    Configuring Jailkit
    Configuring SASL
    Configuring PAM
    Configuring Courier
    Configuring Spamassassin
    Configuring Amavisd
    Configuring Getmail
    Configuring Pureftpd
    Configuring BIND
    Configuring Apache
    Configuring vlogger
    Configuring Apps vhost
    Configuring Database
    Updating ISPConfig
    ISPConfig Port [8080]:

    Create new ISPConfig SSL certificate (yes,no) [no]:

    Reconfigure Crontab? (yes,no) [yes]:

    Updating Crontab
    Restarting services ...
    Stopping MySQL database server: mysqld.
    Starting MySQL database server: mysqld ..
    Checking for corrupt, not cleanly closed and upgrade needing tables..
    Stopping Postfix Mail Transport Agent: postfix.
    Starting Postfix Mail Transport Agent: postfix.
    Stopping SASL Authentication Daemon: saslauthd.
    Starting SASL Authentication Daemon: saslauthd.
    Stopping amavisd: amavisd-new.
    Starting amavisd: amavisd-new.
    Stopping ClamAV daemon: clamd.
    Starting ClamAV daemon: clamd .
    Stopping Courier authentication services: authdaemond.
    Starting Courier authentication services: authdaemond.
    Stopping Courier IMAP server: imapd.
    Starting Courier IMAP server: imapd.
    Stopping Courier IMAP-SSL server: imapd-ssl.
    Starting Courier IMAP-SSL server: imapd-ssl.
    Stopping Courier POP3 server: pop3d.
    Starting Courier POP3 server: pop3d.
    Stopping Courier POP3-SSL server: pop3d-ssl.
    Starting Courier POP3-SSL server: pop3d-ssl.
    Restarting web server: apache2 ... waiting .
    Restarting ftp server: Running: /usr/sbin/pure-ftpd-mysql-virtualchroot -l mysql:/etc/pure-ftpd/db/mysql.conf -l pam -Y 1 -E -8 UTF-8 -D -H -A -O clf:/var/log/pure-ftpd/transfer.log -b -u 1000 -B
    Update finished.

    I've chosen reconfigure services, but there is Internal Server Error again.
     
    Last edited: Mar 1, 2013
  4. till

    till Super Moderator

  5. Snowman

    Snowman Member

    I've recently checked modules in apache2:
    root@vulpix:/tmp/ispconfig3_install/install# ls /etc/apache2/mods-enabled/
    actions.conf auth_basic.load authz_groupfile.load autoindex.load dav.load dir.load include.load negotiation.load proxy.conf reqtimeout.conf setenvif.conf status.conf suphp.load
    actions.load auth_digest.load authz_host.load cgi.load deflate.conf env.load mime.conf perl.load proxy_http.load reqtimeout.load setenvif.load status.load
    alias.conf authn_file.load authz_user.load dav_fs.conf deflate.load fcgid.conf mime.load php5.conf proxy.load rewrite.load ssl.conf suexec.load
    alias.load authz_default.load autoindex.conf dav_fs.load dir.conf fcgid.load negotiation.conf php5.load python.load ruby.load ssl.load suphp.conf

    all enabled :-/

    root@vulpix:/tmp/ispconfig3_install/install# apt-get install apache2 apache2.2-common apache2-doc apache2-mpm-prefork apache2-utils libexpat1 ssl-cert libapache2-mod-php5 php5 php5-common php5-gd php5-mysql php5-imap phpmyadmin php5-cli php5-cgi libapache2-mod-fcgid apache2-suexec php-pear php-auth php5-curl php5-mcrypt mcrypt php5-imagick imagemagick libapache2-mod-suphp libruby libapache2-mod-ruby libapache2-mod-python libapache2-mod-perl2
    Reading package lists... Done
    Building dependency tree
    Reading state information... Done
    apache2-doc is already the newest version.
    apache2-mpm-prefork is already the newest version.
    apache2-suexec is already the newest version.
    apache2-utils is already the newest version.
    apache2.2-common is already the newest version.
    apache2 is already the newest version.
    libexpat1 is already the newest version.
    imagemagick is already the newest version.
    libapache2-mod-fcgid is already the newest version.
    mcrypt is already the newest version.
    libapache2-mod-ruby is already the newest version.
    php-auth is already the newest version.
    php5-imagick is already the newest version.
    libapache2-mod-php5 is already the newest version.
    php-pear is already the newest version.
    php5-cgi is already the newest version.
    php5-cli is already the newest version.
    php5-common is already the newest version.
    php5-curl is already the newest version.
    php5-gd is already the newest version.
    php5-imap is already the newest version.
    php5-mcrypt is already the newest version.
    php5-mysql is already the newest version.
    php5 is already the newest version.
    phpmyadmin is already the newest version.
    libruby is already the newest version.
    ssl-cert is already the newest version.
    libapache2-mod-suphp is already the newest version.
    The following extra packages will be installed:
    libapache2-reload-perl libbsd-resource-perl libdevel-symdump-perl libpython2.6
    Suggested packages:
    libapache2-mod-python-doc
    The following NEW packages will be installed:
    libapache2-mod-perl2 libapache2-mod-python libapache2-reload-perl libbsd-resource-perl libdevel-symdump-perl libpython2.6
    0 upgraded, 6 newly installed, 0 to remove and 0 not upgraded.
    Need to get 2,391 kB of archives.
    After this operation, 7,619 kB of additional disk space will be used.
    Do you want to continue [Y/n]? y
    Get:1 http://ftp.sk.debian.org/debian/ squeeze/main libdevel-symdump-perl all 2.08-3 [16.6 kB]
    Get:2 http://ftp.sk.debian.org/debian/ squeeze/main libapache2-mod-perl2 amd64 2.0.4-7 [1,111 kB]
    Get:3 http://ftp.sk.debian.org/debian/ squeeze/main libpython2.6 amd64 2.6.6-8+b1 [1,077 kB]
    Get:4 http://ftp.sk.debian.org/debian/ squeeze/main libapache2-mod-python amd64 3.3.1-9+b1 [134 kB]
    Get:5 http://ftp.sk.debian.org/debian/ squeeze/main libapache2-reload-perl all 0.10-2 [19.9 kB]
    Get:6 http://ftp.sk.debian.org/debian/ squeeze/main libbsd-resource-perl amd64 1.2904-1 [32.9 kB]
    Fetched 2,391 kB in 0s (6,261 kB/s)
    Selecting previously deselected package libdevel-symdump-perl.
    (Reading database ... 40187 files and directories currently installed.)
    Unpacking libdevel-symdump-perl (from .../libdevel-symdump-perl_2.08-3_all.deb) ...
    Selecting previously deselected package libapache2-mod-perl2.
    Unpacking libapache2-mod-perl2 (from .../libapache2-mod-perl2_2.0.4-7_amd64.deb) ...
    Selecting previously deselected package libpython2.6.
    Unpacking libpython2.6 (from .../libpython2.6_2.6.6-8+b1_amd64.deb) ...
    Selecting previously deselected package libapache2-mod-python.
    Unpacking libapache2-mod-python (from .../libapache2-mod-python_3.3.1-9+b1_amd64.deb) ...
    Selecting previously deselected package libapache2-reload-perl.
    Unpacking libapache2-reload-perl (from .../libapache2-reload-perl_0.10-2_all.deb) ...
    Selecting previously deselected package libbsd-resource-perl.
    Unpacking libbsd-resource-perl (from .../libbsd-resource-perl_1.2904-1_amd64.deb) ...
    Processing triggers for man-db ...
    Setting up libdevel-symdump-perl (2.08-3) ...
    Setting up libapache2-mod-perl2 (2.0.4-7) ...
    Enabling module perl.
    Run '/etc/init.d/apache2 restart' to activate new configuration!
    Setting up libpython2.6 (2.6.6-8+b1) ...
    Setting up libapache2-mod-python (3.3.1-9+b1) ...
    Reloading web server config: apache2.
    Setting up libapache2-reload-perl (0.10-2) ...
    Setting up libbsd-resource-perl (1.2904-1) ...
    Processing triggers for python-central ...

    root@vulpix:/tmp/ispconfig3_install/install# a2enmod suexec rewrite ssl actions include
    Module suexec already enabled
    Module rewrite already enabled
    Module ssl already enabled
    Module actions already enabled
    Module include already enabled

    root@vulpix:/tmp/ispconfig3_install/install# a2enmod dav_fs dav auth_digest && /etc/init.d/apache2 restart
    Considering dependency dav for dav_fs:
    Module dav already enabled
    Module dav_fs already enabled
    Module dav already enabled
    Module auth_digest already enabled
    Restarting web server: apache2 ... waiting .

    Same problem persists.
     
  6. till

    till Super Moderator

    Ensure that you add # in front of the mod_php part of the ispconfig vhost again in case that you removed it.
     
  7. Snowman

    Snowman Member

    It's like :

    root@vulpix:~# cat /etc/apache2/sites-enabled/000-ispconfig.vhost

    ######################################################
    # This virtual host contains the configuration
    # for the ISPConfig controlpanel
    ######################################################

    Listen 8080
    NameVirtualHost *:8080

    <VirtualHost _default_:8080>
    ServerAdmin webmaster@localhost

    <FilesMatch "\.ph(p3?|tml)$">
    SetHandler None
    </FilesMatch>

    <IfModule mod_fcgid.c>
    DocumentRoot /var/www/ispconfig/
    SuexecUserGroup ispconfig ispconfig
    <Directory /var/www/ispconfig/>
    Options Indexes FollowSymLinks MultiViews +ExecCGI
    AllowOverride AuthConfig Indexes Limit Options FileInfo
    AddHandler fcgid-script .php
    FCGIWrapper /var/www/php-fcgi-scripts/ispconfig/.php-fcgi-starter .php
    Order allow,deny
    Allow from all
    </Directory>
    IPCCommTimeout 7200
    </IfModule>

    # <IfModule mod_php5.c>
    # DocumentRoot /usr/local/ispconfig/interface/web/
    # AddType application/x-httpd-php .php
    # <Directory /usr/local/ispconfig/interface/web>
    # # php_admin_value open_basedir "/usr/local/ispconfig/interface:/usr/share:/tmp"
    # Options FollowSymLinks
    # AllowOverride None
    # Order allow,deny
    # Allow from all
    # php_value magic_quotes_gpc 0
    # </Directory>
    # </IfModule>

    # ErrorLog /var/log/apache2/error.log
    # CustomLog /var/log/apache2/access.log combined
    ServerSignature Off

    <IfModule mod_security2.c>
    SecRuleEngine Off
    </IfModule>

    # SSL Configuration
    SSLEngine On
    SSLCertificateFile /usr/local/ispconfig/interface/ssl/ispserver.crt
    SSLCertificateKeyFile /usr/local/ispconfig/interface/ssl/ispserver.key
    #SSLCACertificateFile /usr/local/ispconfig/interface/ssl/ispserver.bundle

    </VirtualHost>

    <Directory /var/www/php-cgi-scripts>
    AllowOverride None
    Order Deny,Allow
    Deny from all
    </Directory>

    <Directory /var/www/php-fcgi-scripts>
    AllowOverride None
    Order Deny,Allow
    Deny from all
    </Directory>

    I think this is good if FCGI is ok.
     
  8. till

    till Super Moderator

    Yes, thats ok. The issue is very strange, may you please check if you set a open_basedir or similar restriction in the php ini used by php-cgi / php-fcgi.
     
  9. Snowman

    Snowman Member

    There is not any open_basedir setting in any /etc/php5/*/php.ini config file. :(
    If I comment out php5 and comment fcgi php in vhost file of ispconfig web interface on port 8080, I will get :

    [Fri Mar 01 17:25:52 2013] [error] [client 217.5.72.98] PHP Warning: require_once(/usr/local/ispconfig/interface/lib/config.inc.php): failed to open stream: Permission denied in /usr/local/ispconfig/interface/web/index.php on line 31
    [Fri Mar 01 17:25:52 2013] [error] [client 217.5.72.98] PHP Fatal error: require_once(): Failed opening required '../lib/config.inc.php' (include_path='.:/usr/share/php:/usr/share/pear') in /usr/local/ispconfig/interface/web/index.php on line 31

    So there is also problem with permissions, but this is not related to fcgi setup I think..
     
    Last edited: Mar 1, 2013
  10. till

    till Super Moderator

    The permissions are fine for fastcgi, you get the permission problem only because you use mod_php, so the permission problm does not exist on fastcgi setups. What you can do as temporary workaround si to run:

    chown 660 /usr/local/ispconfig/interface/lib/config.inc.php

    to use mod_php.
     
  11. bzuro

    bzuro New Member

    i had the same problem. and the command should be

    chmod instead of chown.
     
  12. rubo77

    rubo77 New Member

    Yes,
    I had the same problem and this worked for me on Debian Wheezy with ISPConfig:

    Code:
    chmod 660 /usr/local/ispconfig/interface/lib/config.inc.php
    An update resets the permissions to 600, so this has to be repeated after each update ispconfig!
     
    Last edited: Aug 14, 2014

Share This Page