The Perfect Server - CentOS 5.6 x86_64 [ISPConfig 3] - Page 4

10 Install Dovecot

There's a Dovecot package in the CentOS repository, but unfortunately it doesn't support MySQL. Therefore we must remove the existing Dovecot and install another Dovecot package (from ATrpms) which comes with MySQL support.

yum remove dovecot

Create a new file /etc/yum.repos.d/atrpms.repo...

vi /etc/yum.repos.d/atrpms.repo

... and insert the following lines into the the file:

[atrpms]
name=Red Hat Enterprise Linux 5 - x86_64 - ATrpms
baseurl=http://dl.atrpms.net/el5-x86_64/atrpms/stable
failovermethod=priority
exclude=dovecot-2*
includepkgs=dovecot dovecot-sieve

#
# requires stable
#
[atrpms-testing]
name=Red Hat Enterprise Linux 5 - x86_64 - ATrpms testing
baseurl=http://dl.atrpms.net/el5-x86_64/atrpms/testing
failovermethod=priority
enabled=1
exclude=dovecot-2*
includepkgs=dovecot dovecot-sieve

#
# requires stable and testing
#
[atrpms-bleeding]
name=Red Hat Enterprise Linux 5 - x86_64 - ATrpms bleeding
baseurl=http://dl.atrpms.net/el5-x86_64/atrpms/bleeding
failovermethod=priority
enabled=0

Then import tge gpg key of the atrpm repository...

wget http://ATrpms.net/RPM-GPG-KEY.atrpms
rpm --import RPM-GPG-KEY.atrpms

...and install Dovecot:

yum install dovecot dovecot-sieve

On a 64-bit system, also do this (don't do this on a 32-bit system!):

ln -s /usr/lib64/dovecot/ /usr/lib/dovecot

Now we create the system startup links for Dovecot:

chkconfig --levels 235 dovecot on
/etc/init.d/dovecot start

If Dovecot fails to start with the following error:

Fatal: listen(::, 143) failed: Address already in use

... open /etc/dovecot.conf...

vi /etc/dovecot.conf

... and add the line listen = *:

[...]
#listen = *, [::]
listen = *
[...]

Then try to start Dovecot again:

/etc/init.d/dovecot start

 

11 Install Postfix With MySQL Support

The "normal" Postfix package from the CentOS repository doesn't have MySQL, but the Postfix package from the CentOS Plus repository does. Therefore we remove Postfix...

yum remove postfix

... and install it again, this time from the CentOS Plus repository:

yum install postfix

Then turn off Sendmail and start Postfix and MySQL:

chkconfig --levels 235 mysqld on
/etc/init.d/mysqld start

chkconfig --levels 235 sendmail off
chkconfig --levels 235 postfix on
/etc/init.d/sendmail stop
/etc/init.d/postfix start

 

12 Install Getmail

Getmail can be installed as follows:

yum install getmail

 

13 Set MySQL Passwords And Configure phpMyAdmin

Set passwords for the MySQL root account:

mysql_secure_installation

[root@server1 tmp]# mysql_secure_installation




NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MySQL
      SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!


In order to log into MySQL to secure it, we'll need the current
password for the root user.  If you've just installed MySQL, and
you haven't set the root password yet, the password will be blank,
so you should just press enter here.

Enter current password for root (enter for none):
OK, successfully used password, moving on...

Setting the root password ensures that nobody can log into the MySQL
root user without the proper authorisation.

Set root password? [Y/n]
 <-- ENTER
New password: <-- yourrootsqlpassword
Re-enter new password: <-- yourrootsqlpassword
Password updated successfully!
Reloading privilege tables..
 ... Success!


By default, a MySQL installation has an anonymous user, allowing anyone
to log into MySQL without having to have a user account created for
them.  This is intended only for testing, and to make the installation
go a bit smoother.  You should remove them before moving into a
production environment.

Remove anonymous users? [Y/n]
 <-- ENTER
 ... Success!

Normally, root should only be allowed to connect from 'localhost'.  This
ensures that someone cannot guess at the root password from the network.

Disallow root login remotely? [Y/n]
 <-- ENTER
 ... Success!

By default, MySQL comes with a database named 'test' that anyone can
access.  This is also intended only for testing, and should be removed
before moving into a production environment.

Remove test database and access to it? [Y/n]
 <-- ENTER
 - Dropping test database...
 ... Success!
 - Removing privileges on test database...
 ... Success!

Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.

Reload privilege tables now? [Y/n]
 <-- ENTER
 ... Success!

Cleaning up...



All done!  If you've completed all of the above steps, your MySQL
installation should now be secure.

Thanks for using MySQL!


[root@server1 tmp]#

Now we configure phpMyAdmin. We change the Apache configuration so that phpMyAdmin allows connections not just from localhost (by commenting out the <Directory "/usr/share/phpmyadmin"> stanza):

vi /etc/httpd/conf.d/phpmyadmin.conf

#
#  Web application to manage MySQL
#

#<Directory "/usr/share/phpmyadmin">
#  Order Deny,Allow
#  Deny from all
#  Allow from 127.0.0.1
#</Directory>

Alias /phpmyadmin /usr/share/phpmyadmin
Alias /phpMyAdmin /usr/share/phpmyadmin
Alias /mysqladmin /usr/share/phpmyadmin

Next we change the authentication in phpMyAdmin from cookie to http:

vi /usr/share/phpmyadmin/config.inc.php

[...]
/* Authentication type */
$cfg['Servers'][$i]['auth_type'] = 'http';
[...]

Then we create the system startup links for Apache and start it:

chkconfig --levels 235 httpd on
/etc/init.d/httpd start

Now you can direct your browser to http://server1.example.com/phpmyadmin/ or http://192.168.0.100/phpmyadmin/ and log in with the user name root and your new root MySQL password.

 

14 Install Amavisd-new, SpamAssassin And ClamAV

To install amavisd-new, spamassassin and clamav, run the following command:

yum install amavisd-new spamassassin clamav clamd unzip bzip2 unrar perl-DBD-mysql

Open /etc/sysconfig/amavisd...

vi /etc/sysconfig/amavisd

... and uncomment the line CONFIG_FILE="/etc/amavisd.conf":

### Uncomment this if you want to use amavis with sendmail milter interface.
### See README.milter for details.
#
#MILTER_SOCKET="local:/var/amavis/amavis-milter.sock"
#MILTER_SOCKET="10024@127.0.0.1"

### These are other defaults.
#AMAVIS_ACCOUNT="amavis"
CONFIG_FILE="/etc/amavisd.conf"
#MILTER_FLAGS=""

Then we start freshclam, amavisd, and clamd...

sa-update
chkconfig --levels 235 amavisd on
chkconfig --levels 235 clamd on
/usr/bin/freshclam
/etc/init.d/amavisd start
/etc/init.d/clamd start

... and create some necessary directories:

mkdir /var/run/amavisd /var/spool/amavisd /var/spool/amavisd/tmp /var/spool/amavisd/db
chown amavis /var/run/amavisd /var/spool/amavisd /var/spool/amavisd/tmp /var/spool/amavisd/db
ln -s /var/run/clamav/clamd.sock /var/spool/amavisd/clamd.sock

Share this page:

31 Comment(s)

Add comment

Comments

From: Anonymous at: 2011-04-24 23:41:47

http://dag.wieers.com/rpm/packages/RPM-GPG-KEY.dag.txt gives a import read failed

 it now redirects to http://apt.sw.be/RPM-GPG-KEY.dag.txt however the rpm --import doesn't seem to use the re-direct.

From: Anonymous at: 2011-05-04 11:50:42

Step 9 link is now:

rpm --import http://apt.sw.be/RPM-GPG-KEY.dag.txt

 

From: Anonymous at: 2011-05-30 07:30:17

rpm --import http://dag.wieers.com/packages/RPM-GPG-KEY.dag.txt

From: Rony Jusman at: 2011-07-29 01:35:06

rpm --import http://apt.sw.be/RPM-GPG-KEY.dag.txt

From: Anonymous at: 2011-06-09 10:07:29

I've got a problem with:

wget http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.2-2.el5.rf.x86_64.rpm

 I tried the other link, but it seems to be a problem with wget itself. I can ping google.com without any problems, so this won't be a network error?

From: erik at: 2011-08-29 18:03:03

 hi,

 i got a problem with the code:

yum install ntp httpd mysql-server php php-mysql php-mbstring php-mcrypt phpmyadmin

 i get this message error when i do it:

 Error: php53-common conflicts with php-common

 You could try using --skip-broken to work around the problem

 You could try running: package-cleanup --problems

                        package-cleanup --dupes

                        rpm -Va --nofiles --nodigest

The program package-cleanup is found in the yum-utils package

 how can i solve this trouble?? please its very importa i can't conitnue with the installation.

From: ernie at: 2011-09-01 16:45:23

Used How-to HERE

reason being...

Because the version of php on CentOS 5.6 is 5.1.6, we only can install phpMyAdmin 2.x, I choose 2.11.11.3.
# cd /usr/share
# wget http://sourceforge.net/projects/phpmyadmin/files/phpMyAdmin/2.11.11.3/phpMyAdmin-2.11.11.3-english.tar.gz/download
# tar xvfz phpMyAdmin-2.11.11.3-english.tar.gz
# mv phpMyAdmin-2.11.11.3-english phpmyadmin
# rm phpMyAdmin-2.11.11.3-english.tar.gz

From: at: 2011-12-09 05:02:18

With step 9, it will install the php 5.1.x, which is not for some new CMS like Drupal 7.x. So if you want to install php 5.3.x, use the webtatic repo at http://www.webtatic.com/packages/php53/.

After install the repo, you can complete step 9 with command

yum --enablerepo=webtatic install ntp httpd mysql-server php php-mysql php-mbstring php-mcrypt phpmyadmin

 

 

From: Marcelo Santabaia at: 2011-05-23 12:24:24

When I type the command:

vi /usr/share/phpmyadmin/config.inc.php

I receive this ERROR:


"/usr/share/phpmyadmin/config.inc.php"
"/usr/share/phpmyadmin/config.inc.php" E212: Can't open file for writing

 

Why?

From: Anonymous at: 2012-12-22 03:11:10

hi

  you must use this path

 

/etc/httpd/conf.d/config.inc.php

    e.x : nano /etc/httpd/conf.d/config.inc.php

     

From: Hetz Ben Hamo at: 2011-04-20 19:20:46

Trying to install postfix, even by enabling the centosplus repository will not help, since there is an update which is newer then whats available in centosplus.

 Workaround: go to your local centos mirror, go to the centosplus directory, to http://mirror.centos.org/centos/5.6/centosplus/x86_64/RPMS/ and download manually the file: http://mirror.centos.org/centos/5.6/centosplus/x86_64/RPMS/postfix-2.3.3-2.el5.centos.mysql_pgsql.x86_64.rpm

 Then do: yum localinstall postfix-2.3.3-2.el5.centos.mysql_pgsql.x86_64.rpm (it needs to add .. postgresql.. don't ask me why..) and then things will work.

From: at: 2011-05-23 14:35:10
From: Web Age Support at: 2011-06-07 16:43:59

started with:

dovecot-1.2.17-0_115

dovecot-sieve-0.1.18-7

Commands I entered (as root) to get dovecot-sieve working:

yum install rpm-build

yum install redhat-rpm-config

mkdir -p ~/rpmbuild/{BUILD,RPMS,SOURCES,SPECS,SRPMS}

echo '%_topdir %(echo $HOME)/rpmbuild' > ~/.rpmmacros

yum install make gcc

cd /root

wget 'http://dl.atrpms.net/all/dovecot-sieve-0.1.18-7.src.rpm'

wget http://dl.atrpms.net/all/dovecot-devel-1.2.17-0_115.el5.x86_64.rpm

rpm -ivh dovecot-devel-1.2.17-0_115.el5.x86_64.rpm 

rpmbuild --rebuild dovecot-sieve-0.1.18-7.src.rpm 

cd /root/rpmbuild/RPMS/x86_64

rpm -e dovecot-sieve

rpm -ivh dovecot-sieve-0.1.18-7.x86_64.rpm 

service dovecot restart

From: Anonymous at: 2011-05-18 11:47:14

Dovecot Warning ...

At the time i wrote this, the AtRPMS repo updated the dovecot from 1.2.16 to 1.2.17 and the current dovecot-sieve package is not in sync. Either you'll need to wait to update their dovecot-sieve package or you need to recompile from sources with rpmbuild.

 regards

From: at: 2011-05-19 11:48:03

Hi, Thank you for this really nice guide! Is it possible to give us more instructions about dovecot and 1.2.16 version,
i have installed 1.2.17 and i am trying for about two days now to figure out what was wrong.

I mean how to install or downgrade the  1.16 or perhaps how to recompile the dovecote package.

 

From: Luca Tocco at: 2011-05-20 13:33:59

Dovecot 1.2.17 not work on this guide from latest update. I have installed courier instead of dovecot and ispconfig work great!

 Bye.

From: Anonymous at: 2011-04-27 03:05:20

you can install the mod_fcgid from fedora epel repository.

From: Curu at: 2011-05-01 01:01:55

also, you can install suphp from rpmfoge repo using:

yum install mod_suphp 

From: at: 2011-07-26 16:36:15

That's good cuz the howto doesn't work: ...

checking for unistd.h... (cached) yes

checking for APR... configure: error: the --with-apr parameter is incorrect. It must specify an install prefix, a

build directory, or an apr-config file.

From: at: 2011-07-27 05:37:21

[root@ispconfig3 sysconfig]# yum install bind-chroot
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * base: centos.maulvi.net
 * extras: centos.maulvi.net
 * rpmforge: fr2.rpmfind.net
 * updates: centos.maulvi.net
Excluding Packages from Red Hat Enterprise Linux 5 - x86_64 - ATrpms
Finished
Reducing Red Hat Enterprise Linux 5 - x86_64 - ATrpms to included packages only
Finished
Excluding Packages from Red Hat Enterprise Linux 5 - x86_64 - ATrpms testing
Finished
Reducing Red Hat Enterprise Linux 5 - x86_64 - ATrpms testing to included packages only
Finished
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package bind-chroot.x86_64 30:9.3.6-16.P1.el5 set to be updated
--> Finished Dependency Resolution

Dependencies Resolved

=================================================================================================
 Package                Arch              Version                          Repository       Size
=================================================================================================
Installing:
 bind-chroot            x86_64            30:9.3.6-16.P1.el5               base             46 k

Transaction Summary
=================================================================================================
Install       1 Package(s)
Upgrade       0 Package(s)

Total download size: 46 k
Is this ok [y/N]: y
Downloading Packages:
bind-chroot-9.3.6-16.P1.el5.x86_64.rpm                                    |  46 kB     00:01
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing     : bind-chroot                                                               1/1

Installed:
  bind-chroot.x86_64 30:9.3.6-16.P1.el5

Complete!
[root@ispconfig3 sysconfig]# chmod 755 /var/named/
[root@ispconfig3 sysconfig]# chmod 775 /var/named/chroot/
[root@ispconfig3 sysconfig]# chmod 775 /var/named/chroot/var/named/
[root@ispconfig3 sysconfig]# chmod 775 /var/named/chroot/var/run/
[root@ispconfig3 sysconfig]# chmod 777 /var/named/chroot/var/run/named/
[root@ispconfig3 sysconfig]# cd /var/named/chroot/var/named/
[root@ispconfig3 named]# ln -s ../../ chroot
[root@ispconfig3 named]# touch /var/named/chroot/var/named/named.local
[root@ispconfig3 named]# cp /usr/share/doc/bind-9.3.6/sample/var/named/named.root /var/named/chroot/var/named/named.root
[root@ispconfig3 named]# touch /var/named/chroot/etc/named.conf.local
[root@ispconfig3 named]# vi /var/named/chroot/etc/named.conf
 (named.conf edited as per the text)
[root@ispconfig3 named]# chkconfig named on
[root@ispconfig3 named]# service named start
Starting named:
Error in named configuration:
/var/named/chroot/var/named/named.local:1: unknown option '$TTL'
/var/named/chroot/var/named/named.local:3: unknown option 'Serial'
/var/named/chroot/var/named/named.local:4: unknown option 'Refresh'
/var/named/chroot/var/named/named.local:5: unknown option 'Retry'
/var/named/chroot/var/named/named.local:6: unknown option 'Expire'
/var/named/chroot/var/named/named.local:7: unknown option 'Minimum'
/etc/named.conf:30: unexpected token near end of file
                                                           [FAILED]

From: Rolf Ernst at: 2011-09-05 02:59:01

For all it's worth - I am getting the same error. I am installing under OpenVZ - not sure this is related?

From: Anonymous at: 2012-02-08 12:38:47

I have the same error. Have you solved it?

From: at: 2011-12-09 05:06:30

At step 15, if you already install webtatic repo I suggested on page 3 step 9, you don't need to enable the centos.karan.org testing repository, just simply run this command to install

yum --enablerepo=webtatic install php php-devel php-gd php-imap php-ldap php-mysql php-odbc php-pear 
php-xml php-xmlrpc php-eaccelerator php-mbstring php-mcrypt php-mhash 
php-mssql php-snmp php-soap php-tidy curl curl-devel perl-libwww-perl 
ImageMagick libxml2 libxml2-devel mod_fcgid php-cli httpd-devel
Or you can enable the repo webtatic by editing the repo file to enabled=1

From: at: 2011-12-09 05:13:03

With my Drupal 7.x site using SuPHP on ISPConfig3, with step to install suphp, I have to change the umask from

umask=0077  => change to umask=0022
Or folders created by Drupal will have wrong permission.

From: Anonymous at: 2011-05-04 10:27:54

how can you run firefox if u didnt instaled gnome or kde...?

From: Anonymous at: 2011-06-14 23:22:18

wow!

From: Anonymous at: 2011-07-07 14:56:36

Hello...

           I install my firth's the ISPConfig 3 in a CentOS 5.6 server. I follow the steps perfectly.

           And only one thing doesnt work. I cant recivied incomming mail. 

          The error is

Final-Recipient: rfc822; suport@mydomain.com.py
Original-Recipient: rfc822;suport@mydomain.com.py
Action: failed
Status: 5.1.1
Diagnostic-Code: X-Postfix; unknown user: "suport"

 

I Seek a lot of forums buy nobody resolve the problem, well, my kind of problem... 

 Thanks to all

 

CharlyKai from PARAGUAY

From: Anonymous at: 2011-07-21 09:31:34

Really?

This is the problem: Diagnostic-Code: X-Postfix; unknown user: "suport"

 Maybe, U have support, not suport user?

From: Anonymous at: 2011-07-21 09:44:00

It's a miracle! He don't install any linux window manager, and can run an MS windows program.

I hope, You will be  learning more, for example netwrorking, before starting Your sysadmin's life.

From: at: 2011-05-08 12:54:44

I'm a CentOS 5.6 version is used and the description of at least 20 in bad!

By the time I made the installation work properly there is nothing!

this is the whole thing as it is scandalous!

From: at: 2012-01-06 23:54:45

Hello I saw all tutorial step by step, at the end only ispconfig doesn't start.

 I understood that it isn't under init.d ispconfig, so I can't manually start the service.

 Please how can I do?

 thanks in advance