DISASTER after upgrade from 1.0.2 to 1.0.3

[mac86]

DISASTER after upgrade from 1.0.2 to 1.0.3 - help please.

I'm very desesperated with this. Working all night without sucessful

After upgrade from 1.0.2 to 1.0.3 (following steps on "upgrade" sectrion from docs/Debian/INSTALL) I've lost next things

MAIL
- mail's password seems doesn't work anymore
/etc/courier/userdb seems to have passwords thats doesn't work

- I've looked mail_users table (on mysql ispcp db) and it looks with no change from upgrade

- also passwords from /etc/sasldb2 (for smtp auth) doesn't work anymore

- I only have a backup from /etc/courier/userdb
With makeuserdb I can make work POP mail

WEBMAIL
- I get: "The requested URL / was not found on this server."

PANEL y WEB SITES
- I get: "The requested URL / was not found on this server."

I don't know why passwords seems doesn't to be worked after
upgrade. I've tried ispcp-rqst-mrg script with no success too.



LOGS:

Fail on POP

Quote: Quote:Feb 16 10:30:58 panel pop3d: LOGIN: ip=[::ffff:190.97.1.6], command=CAPA
Feb 16 10:30:58 panel pop3d: LOGIN: ip=[::ffff:190.97.1.6], command=USER
Feb 16 10:30:58 panel pop3d: LOGIN: ip=[::ffff:190.97.1.6], command=PASS
Feb 16 10:30:58 panel pop3d: LOGIN: ip=[::ffff:190.97.1.6], username=XXXXX@XXXXXcom.ar
Feb 16 10:30:58 panel pop3d: LOGIN: ip=[::ffff:190.97.1.6], password=XXXXXX
Feb 16 10:30:58 panel pop3d: LOGIN FAILED, user=XXXXX@XXXXXcom.ar, ip=[::ffff:190.97.1.6]

Fail on SMTP AUTH:

Quote: Quote:Feb 16 10:31:57 panel postfix/smtpd[4340]: connect from unknown[190.246.219.151]
Feb 16 10:31:57 panel postfix/smtpd[4340]: warning: unknown[190.246.219.151]: SASL LOGIN authentication failed: authentication failure
Feb 16 10:31:57 panel postfix/smtpd[4340]: lost connection after AUTH from unknown[190.246.219.151]

The main problem is Mail user authentication (pop and smtp), and
of course ispcp panel access.

Must I post other log file ?

Somebody can help me ?


I've no problems if somebody want to offer me payed support.

THANK YOU A LOT.

[kilburn]

First of all, don't double post please (even in different languages).

Mail issues
The authentication issues are most probably due to a changed ispcp key. Do you have a backup of the following files before the upgrade?:

Code:

/var/www/ispcp/engine/ispcp-db-keys.pl
/var/www/ispcp/gui/include/ispcp-db-keys.php
/var/www/ispcp/engine/messenger/ispcp-db-keys.pl

If you do, try to restore them, regenerate all the users' configurations (there's a howto in the documentation) and see if it's working. Otherwise, you will most probably have to change all the users' passwords (you might be able to write a script to restore them from the userdb file, but it won't be an easy task).

Webmail / panel / websites
This is probably due to a misconfigured apache ispcp.conf. It looks like if during the upgrade process your ispcp.conf file had been regenerated from scratch. Anyway, please post the output of:

Code:

apache2ctl -S

as well as the relevant apache logfiles (/var/log/apache2/users/your.admin.dmnt-access.log)

[mac86]

Thank you for your reply Kilburn...!

Sorry for my double post. I've deleted spanish thread.
(I'm a bit newbie with forum rules)

I've searched with no sucess a backup of ispcp-db-keys.pl file.

Can you give me a hint about how to restore passwords from userdb file ?
I have not a idea about password formats style
I understend that userdb password style is not equal to mail_users table password style .

Code:

panel:~# apache2ctl -S

VirtualHost configuration:
127.0.0.1:80           is a NameVirtualHost
         default server panel (/etc/apache2/sites-enabled/01_awstats.conf:28)
         port 80 namevhost panel (/etc/apache2/sites-enabled/01_awstats.conf:28)
AAA.BBB.CCC.DDD:80        is a NameVirtualHost
         default server panel.dimensionip.com.ar (/etc/apache2/sites-enabled/00_master.conf:24)
         port 80 namevhost panel.dimensionip.com.ar (/etc/apache2/sites-enabled/00_master.conf:24)
         port 80 namevhost domaingr.com.ar (/etc/apache2/sites-enabled/ispcp.conf:65)
         port 80 namevhost domainal.com (/etc/apache2/sites-enabled/ispcp.conf:176)
         port 80 namevhost domainsp.com.ar (/etc/apache2/sites-enabled/ispcp.conf:296)
         port 80 namevhost domainar.com.ar (/etc/apache2/sites-enabled/ispcp.conf:416)
         port 80 namevhost domainex.com.ar (/etc/apache2/sites-enabled/ispcp.conf:536)
         port 80 namevhost domainib.com.ar (/etc/apache2/sites-enabled/ispcp.conf:663)
         port 80 namevhost domainne.com.ar (/etc/apache2/sites-enabled/ispcp.conf:783)
         port 80 namevhost domainfr.com.ar (/etc/apache2/sites-enabled/ispcp.conf:903)
         port 80 namevhost domainfm.com.ar (/etc/apache2/sites-enabled/ispcp.conf:1023)
         port 80 namevhost domainmc.com (/etc/apache2/sites-enabled/ispcp.conf:1134)
         port 80 namevhost domainla.com.ar (/etc/apache2/sites-enabled/ispcp.conf:1254)
         port 80 namevhost domainq-.com.ar (/etc/apache2/sites-enabled/ispcp.conf:1374)
         port 80 namevhost domainma.com.ar (/etc/apache2/sites-enabled/ispcp.conf:1501)
         port 80 namevhost domainne.com.ar (/etc/apache2/sites-enabled/ispcp.conf:1621)
         port 80 namevhost domainbr.com.ar (/etc/apache2/sites-enabled/ispcp.conf:1725)
         port 80 namevhost domainsi.com.ar (/etc/apache2/sites-enabled/ispcp.conf:1852)
         port 80 namevhost domainsu.com.ar (/etc/apache2/sites-enabled/ispcp.conf:1972)
         port 80 namevhost domainde.com.mx (/etc/apache2/sites-enabled/ispcp.conf:2092)
         port 80 namevhost domainex.net (/etc/apache2/sites-enabled/ispcp.conf:2219)
         port 80 namevhost domainim.com.ar (/etc/apache2/sites-enabled/ispcp.conf:2339)
         port 80 namevhost domainme.com.ar (/etc/apache2/sites-enabled/ispcp.conf:2450)
         port 80 namevhost domainco.com.ar (/etc/apache2/sites-enabled/ispcp.conf:2577)
         port 80 namevhost domainpu.com.ar (/etc/apache2/sites-enabled/ispcp.conf:2697)
         port 80 namevhost domainsp.com.ar (/etc/apache2/sites-enabled/ispcp.conf:2817)
         port 80 namevhost domainti.com.ar (/etc/apache2/sites-enabled/ispcp.conf:2937)
         port 80 namevhost domainal.com.ar (/etc/apache2/sites-enabled/ispcp.conf:3057)
         port 80 namevhost domainme.com.ar (/etc/apache2/sites-enabled/ispcp.conf:3184)
         port 80 namevhost domainec.com.ar (/etc/apache2/sites-enabled/ispcp.conf:3304)
         port 80 namevhost domainte.com.ar (/etc/apache2/sites-enabled/ispcp.conf:3415)
         port 80 namevhost domainga.com.ar (/etc/apache2/sites-enabled/ispcp.conf:3535)
         port 80 namevhost domainzi.com.ar (/etc/apache2/sites-enabled/ispcp.conf:3655)
         port 80 namevhost domainlu.com.ar (/etc/apache2/sites-enabled/ispcp.conf:3766)
         port 80 namevhost domainne.com (/etc/apache2/sites-enabled/ispcp.conf:3877)
         port 80 namevhost domainri.com.ar (/etc/apache2/sites-enabled/ispcp.conf:3997)
         port 80 namevhost domainay.com.ar (/etc/apache2/sites-enabled/ispcp.conf:4117)
         port 80 namevhost domainag.com.ar (/etc/apache2/sites-enabled/ispcp.conf:4228)
         port 80 namevhost domainmi.com.ar (/etc/apache2/sites-enabled/ispcp.conf:4348)
         port 80 namevhost domainmo.com.ar (/etc/apache2/sites-enabled/ispcp.conf:4468)
         port 80 namevhost domainca.com.ar (/etc/apache2/sites-enabled/ispcp.conf:4588)
         port 80 namevhost domainiw.com.ar (/etc/apache2/sites-enabled/ispcp.conf:4708)
         port 80 namevhost domainel.com.ar (/etc/apache2/sites-enabled/ispcp.conf:4828)
         port 80 namevhost domainta.com.ar (/etc/apache2/sites-enabled/ispcp.conf:4939)
         port 80 namevhost domainvo.com.ar (/etc/apache2/sites-enabled/ispcp.conf:5050)
         port 80 namevhost domainfr.com.ar (/etc/apache2/sites-enabled/ispcp.conf:5170)
         port 80 namevhost domainch.com.ar (/etc/apache2/sites-enabled/ispcp.conf:5281)
         port 80 namevhost domainur.com.ar (/etc/apache2/sites-enabled/ispcp.conf:5385)
         port 80 namevhost domainst.com.ar (/etc/apache2/sites-enabled/ispcp.conf:5505)
         port 80 namevhost domainca.com.ar (/etc/apache2/sites-enabled/ispcp.conf:5625)
         port 80 namevhost domaintd.com.ar (/etc/apache2/sites-enabled/ispcp.conf:5729)
         port 80 namevhost domainag.com.ar (/etc/apache2/sites-enabled/ispcp.conf:5849)
         port 80 namevhost domainje.com.ar (/etc/apache2/sites-enabled/ispcp.conf:5969)
         port 80 namevhost domainju.com.ar (/etc/apache2/sites-enabled/ispcp.conf:6096)
         port 80 namevhost domainde.com.ar (/etc/apache2/sites-enabled/ispcp.conf:6216)
         port 80 namevhost domainla.gov.ar (/etc/apache2/sites-enabled/ispcp.conf:6336)
         port 80 namevhost domainsa.gov.ar (/etc/apache2/sites-enabled/ispcp.conf:6456)
         port 80 namevhost domaince.com.ar (/etc/apache2/sites-enabled/ispcp.conf:6576)
         port 80 namevhost domainba.com.ar (/etc/apache2/sites-enabled/ispcp.conf:6696)
         port 80 namevhost domainfr.com.ar (/etc/apache2/sites-enabled/ispcp.conf:6816)
         port 80 namevhost domainca.com.ar (/etc/apache2/sites-enabled/ispcp.conf:6936)
         port 80 namevhost domainpr.com.ar (/etc/apache2/sites-enabled/ispcp.conf:7056)
         port 80 namevhost domainli.com.ar (/etc/apache2/sites-enabled/ispcp.conf:7176)
         port 80 namevhost domainnu.com.ar (/etc/apache2/sites-enabled/ispcp.conf:7527)
         port 80 namevhost domaingr.com.ar (/etc/apache2/sites-enabled/ispcp.conf:7647)
         port 80 namevhost domaingu.com.ar (/etc/apache2/sites-enabled/ispcp.conf:7767)
         port 80 namevhost domainas.com.ar (/etc/apache2/sites-enabled/ispcp.conf:7887)
         port 80 namevhost domainwi.com.ar (/etc/apache2/sites-enabled/ispcp.conf:8007)
         port 80 namevhost domaintr.com.ar (/etc/apache2/sites-enabled/ispcp.conf:8127)
         port 80 namevhost domainsi.com.ar (/etc/apache2/sites-enabled/ispcp.conf:8247)
         port 80 namevhost domainpg.com.ar (/etc/apache2/sites-enabled/ispcp.conf:8367)
         port 80 namevhost domainol.com.ar (/etc/apache2/sites-enabled/ispcp.conf:8487)
         port 80 namevhost domainmo.com.ar (/etc/apache2/sites-enabled/ispcp.conf:8607)
         port 80 namevhost domainlo.com.ar (/etc/apache2/sites-enabled/ispcp.conf:8727)
         port 80 namevhost domainca.com.ar (/etc/apache2/sites-enabled/ispcp.conf:8847)
         port 80 namevhost domainfg.com.ar (/etc/apache2/sites-enabled/ispcp.conf:8967)
         port 80 namevhost domaindl.com.ar (/etc/apache2/sites-enabled/ispcp.conf:9087)
         port 80 namevhost domaines.com.ar (/etc/apache2/sites-enabled/ispcp.conf:9207)
         port 80 namevhost domainag.com.ar (/etc/apache2/sites-enabled/ispcp.conf:9327)
         port 80 namevhost domainac.com.ar (/etc/apache2/sites-enabled/ispcp.conf:9447)
         port 80 namevhost domainmo.com.ar (/etc/apache2/sites-enabled/ispcp.conf:9567)
         port 80 namevhost domainin.com.ar (/etc/apache2/sites-enabled/ispcp.conf:9687)
         port 80 namevhost domainar.com.ar (/etc/apache2/sites-enabled/ispcp.conf:9807)
         port 80 namevhost domainpr.com.ar (/etc/apache2/sites-enabled/ispcp.conf:9927)
         port 80 namevhost domainme.com.ar (/etc/apache2/sites-enabled/ispcp.conf:10047)
         port 80 namevhost domainvr.com.ar (/etc/apache2/sites-enabled/ispcp.conf:10167)
         port 80 namevhost domainpu.com.ar (/etc/apache2/sites-enabled/ispcp.conf:10287)
         port 80 namevhost domainfa.com.ar (/etc/apache2/sites-enabled/ispcp.conf:10407)
         port 80 namevhost domaince.com.ar (/etc/apache2/sites-enabled/ispcp.conf:10527)
         port 80 namevhost domainfi.com.ar (/etc/apache2/sites-enabled/ispcp.conf:10647)
         port 80 namevhost domainin.com.ar (/etc/apache2/sites-enabled/ispcp.conf:10767)
         port 80 namevhost domainci.com.ar (/etc/apache2/sites-enabled/ispcp.conf:10887)
         port 80 namevhost domainde.com.ar (/etc/apache2/sites-enabled/ispcp.conf:11007)
         port 80 namevhost domainpr.com.ar (/etc/apache2/sites-enabled/ispcp.conf:11127)
         port 80 namevhost domaingu.com.ar (/etc/apache2/sites-enabled/ispcp.conf:11247)
         port 80 namevhost domainig.com.ar (/etc/apache2/sites-enabled/ispcp.conf:11367)
         port 80 namevhost domainst.com.ar (/etc/apache2/sites-enabled/ispcp.conf:11487)
         port 80 namevhost domainal.com.ar (/etc/apache2/sites-enabled/ispcp.conf:11607)
         port 80 namevhost domainma.com.ar (/etc/apache2/sites-enabled/ispcp.conf:11727)
         port 80 namevhost domainmu.com.ar (/etc/apache2/sites-enabled/ispcp.conf:11847)
         port 80 namevhost domainar.com.ar (/etc/apache2/sites-enabled/ispcp.conf:11967)
         port 80 namevhost domaindi.com.ar (/etc/apache2/sites-enabled/ispcp.conf:12094)
         port 80 namevhost domainwo.com.ar (/etc/apache2/sites-enabled/ispcp.conf:12214)
         port 80 namevhost domainqu.com.ar (/etc/apache2/sites-enabled/ispcp.conf:12334)
         port 80 namevhost domaince.com.ar (/etc/apache2/sites-enabled/ispcp.conf:12454)
         port 80 namevhost domainau.com.ar (/etc/apache2/sites-enabled/ispcp.conf:12574)
         port 80 namevhost domainwo.com.ar (/etc/apache2/sites-enabled/ispcp.conf:12679)
         port 80 namevhost domainsu.com.ar (/etc/apache2/sites-enabled/ispcp.conf:12892)
         port 80 namevhost domainsp.com.ar (/etc/apache2/sites-enabled/ispcp.conf:12998)
         port 80 namevhost domainal.com.ar (/etc/apache2/sites-enabled/ispcp.conf:13105)
Syntax OK

Of course, I've changed domain names for security.

Quote:as well as the relevant apache logfiles (/var/log/apache2/users/your.admin.dmnt-access.log)

My apache log file is not generating logs when I try to access to my web panel

Can you give me a hint with this topic ?
THANK YOU

[kilburn]

Apache
You're missing the master configuration file (/etc/apache2/sites-available/00_master.conf) or the corresponding symlink to enable it (/etc/apache2/sites-enabled/00_master.conf -> /etc/apache2/sites-available/00_master.conf).

If it's not there, you will have to recreate it manually. To do so:
1. cp /etc/ispcp/apache2/00_master.conf /etc/apache2/sites-available/
2. Edit the /etc/ispcp/sites-available/00_master.conf file, replacing all the tags (the things that look like {VARIABLE}) by their values.
3. a2ensite 00_master.conf

Restart apache and enjoy your restored websites.

Mail passwords
After researching the "restore from userdb" possibility, I'm afraid to tell you that it is impossible to do. The reason is that passwords there are not real passwords, but hashes of them, designed precisely to prevent the possibility of reverse-obtaining the original passwords from the stored hashes.

[mac86]

Hi.

Quote:Apache
You're missing the master configuration file (/etc/apache2/sites-available/00_master.conf) or the corresponding symlink to enable it (/etc/apache2/sites-enabled/00_master.conf -> /etc/apache2/sites-available/00_master.conf).

I've this:

Quote:panel:/etc/apache2/sites-enabled# ls -lh
total 0
lrwxrwxrwx 1 root root 43 2009-09-05 15:40 00_master.conf -> /etc/apache2/sites-available/00_master.conf
lrwxrwxrwx 1 root root 44 2009-09-05 15:40 01_awstats.conf -> /etc/apache2/sites-available/01_awstats.conf
lrwxrwxrwx 1 root root 39 2009-09-05 15:41 ispcp.conf -> /etc/apache2/sites-available/ispcp.conf

and this:

Quote:panel:/etc/apache2/sites-available# ls -lh
total 456K
-rw-r--r-- 1 root root 2.8K 2010-02-15 19:11 00_master.conf
-rw-r--r-- 1 root root 1.5K 2010-02-15 19:11 01_awstats.conf
-rw-r--r-- 1 root root 950 2009-07-14 17:00 default
-rw-r--r-- 1 root root 7.2K 2009-07-14 17:00 default-ssl
-rw-r--r-- 1 root root 432K 2010-02-16 09:41 ispcp.conf

How ever, I haven't this file:

Quote:panel:/etc/apache2/sites-available# ls -lh /etc/ispcp/apache2/00_master.conf
ls: cannot access /etc/ispcp/apache2/00_master.conf: No such file or directory

my a2ensite reply

Quote:panel:/etc/apache2/sites-enabled# a2ensite 00_master.conf
Site 00_master.conf already enabled

And my 00_master.conf

Quote:panel:~# cat /etc/apache2/sites-enabled/00_master.conf
#
# ispCP Ï (OMEGA) a Virtual Hosting Control System
#
# @copyright 2001-2006 by moleSoftware GmbH
# @copyright 2006-2009 by ispCP | http://isp-control.net
# @version SVN: $Id: 00_master.conf 1574 2009-03-05 05:57:05Z benedikt $
# @link http://isp-control.net
# @author ispCP Team
#
# @license
# This program is free software; you can redistribute it and/or modify it under
# the terms of the MPL General Public License as published by the Free Software
# Foundation; either version 1.1 of the License, or (at your option) any later
# version.
# You should have received a copy of the MPL Mozilla Public License along with
# this program; if not, write to the Open Source Initiative (OSI)
# http://opensource.org | osi@opensource.org
#
################################################################################​
#
# Master Begin
#

<VirtualHost XX.YY.ZZ.TT:80>

ServerAdmin uuuuuuu@gmail.com
DocumentRoot /var/www/ispcp/gui

ServerName panel.dimensionip.com.ar

Alias /errors /var/www/ispcp/gui/errordocs/

ErrorDocument 401 /errors/401.html
ErrorDocument 403 /errors/403.html
ErrorDocument 404 /errors/404.html
ErrorDocument 500 /errors/500.html
ErrorDocument 503 /errors/503.html

Alias /pma /var/www/ispcp/gui/tools/pma/
Alias /webmail /var/www/ispcp/gui/tools/webmail/
Alias /ftp /var/www/ispcp/gui/tools/filemanager/

<IfModule suexec_module>
SuexecUserGroup vu2000 vu2000
</IfModule>

<Directory /var/www/ispcp/gui>
Options -Indexes Includes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
Allow from all
</Directory>

<IfModule mod_fcgid.c>
<Directory /var/www/ispcp/gui>
FCGIWrapper /var/www/fcgi/master/php5-fcgi-starter .php
Options +ExecCGI
</Directory>
<Directory "/var/www/fcgi/master">
AllowOverride None
Options +ExecCGI MultiViews -Indexes
Order allow,deny
Allow from all
</Directory>
</IfModule>
<IfModule mod_fastcgi.c>
ScriptAlias /php5/ /var/www/fcgi/master/
<Directory "/var/www/fcgi/master">
AllowOverride None
Options +ExecCGI MultiViews -Indexes
Order allow,deny
Allow from all
</Directory>
</IfModule>

<IfModule mod_php5.c>
<Directory /var/www/ispcp/gui>
php_admin_value open_basedir "/var/www/ispcp/gui/:/etc/ispcp/:/var/run/ispcp.lock:/proc/:/bin/df:/bin/mount:/var/log/rkhunter.log:/var/log/chkrootkit.log:/usr/share/php/"
php_admin_value session.save_path "/var/www/ispcp/gui/phptmp/"
php_admin_value upload_tmp_dir "/var/www/ispcp/gui/phptmp/"
</Directory>
</IfModule>

</VirtualHost>

#
# Master End
#

I don't know why have a 404 reply from apache.
Any website or panel or webmail get next:

Quote:The requested URL / was not found on this server.

Have you any hint ?
thank you very much

[kilburn]

Sorry I got confused by seeing the 127.0.0.1 virtualhost first in the "apache2ctl -S" command. Everything seems to be ok regarding your apache config, so the only thing I can think of is that.... you're missing the gui files! Do you have the /var/www/ispcp/gui folder?

[mac86]

(02-17-2010 02:21 AM)kilburn Wrote:  Sorry I got confused by seeing the 127.0.0.1 virtualhost first in the "apache2ctl -S" command. Everything seems to be ok regarding your apache config, so the only thing I can think of is that.... you're missing the gui files! Do you have the /var/www/ispcp/gui folder?

yes, I've it

Quote:panel:~# cd /var/www/ispcp/gui/
panel:/var/www/ispcp/gui# ls -l
total 72
dr-xr-xr-x 2 vu2000 www-data 4096 2010-02-16 09:05 admin
dr-xr-xr-x 2 vu2000 www-data 4096 2010-02-16 09:05 client
dr-xr-xr-x 3 vu2000 www-data 4096 2010-02-15 14:49 domain_default_page
dr-xr-xr-x 3 vu2000 www-data 4096 2009-08-26 02:05 errordocs
-r--r--r-- 1 vu2000 www-data 1886 2010-02-16 09:05 favicon.ico
-r--r--r-- 1 vu2000 www-data 1009 2010-02-16 09:06 imagecode.php
dr-xr-xr-x 7 vu2000 www-data 4096 2010-02-16 09:05 include
-r--r--r-- 1 vu2000 www-data 3233 2010-02-16 09:05 index.php
-r--r--r-- 1 vu2000 www-data 4566 2010-02-16 09:06 lostpassword.php
dr-xr-xr-x 2 vu2000 www-data 4096 2010-02-16 09:05 orderpanel
drwxr-xr-x 2 vu2000 www-data 12288 2010-02-16 09:05 phptmp
dr-xr-xr-x 2 vu2000 www-data 4096 2010-02-16 09:05 reseller
-r--r--r-- 1 vu2000 www-data 25 2010-02-16 09:05 robots.txt
dr-xr-xr-x 5 vu2000 www-data 4096 2010-02-16 09:06 themes
dr-xr-xr-x 6 vu2000 www-data 4096 2010-02-15 14:48 tools

[kilburn]

If you want me to take a look at it, please send me the following details through a PM:

- IP of your server
- root password
- panel's admin password

[mac86]

solved!
problem was lost encription keys and a NAT issue

regards!
andres.