Topics

16

Technical Help / How upgrade phpmyadmin?

« on: December 08, 2020, 06:24:18 am »

The script only checks if phpmyadmin is installed.
Is it recommended to update phpmyadmin manually?
If so, how?

17

Technical Help / EHCP and Debian 10 with php7.4

« on: November 20, 2020, 02:41:26 pm »

EHCP force works not, when Debian 10 with php7.4 is preinstalled.
The install script runs. But the first visit to the EHCP website does not work.

18

Bugs / Since EHCP update, FTP and SMTP no longer works

« on: November 19, 2020, 10:48:33 am »

Since the newest EHCP update, FTP has "Login incorrect":

Antwort:   331 Please specify the password.
Befehl:   PASS **************
Antwort:   530 Login incorrect.

OS: Debian 10

Code: [Select]

Nov 21 23:39:09 xenforo systemd[1]: Starting vsftpd FTP server...
Nov 21 23:39:09 xenforo systemd[1]: Started vsftpd FTP server.
Nov 21 23:39:12 xenforo /etc/security/pam_dbauth_vsftpd.py[12101]: Traceback (most recent call last):
Nov 21 23:39:12 xenforo /etc/security/pam_dbauth_vsftpd.py[12101]:   File "/etc/security/pam_dbauth_vsftpd.py", line 64, in <module>
Nov 21 23:39:12 xenforo /etc/security/pam_dbauth_vsftpd.py[12101]:     from passlib.hash import mysql41
Nov 21 23:39:12 xenforo /etc/security/pam_dbauth_vsftpd.py[12101]: ImportError: No module named passlib.hash
Nov 21 23:39:51 xenforo /etc/security/pam_dbauth_vsftpd.py[12103]: Traceback (most recent call last):
Nov 21 23:39:51 xenforo /etc/security/pam_dbauth_vsftpd.py[12103]:   File "/etc/security/pam_dbauth_vsftpd.py", line 64, in <module>
Nov 21 23:39:51 xenforo /etc/security/pam_dbauth_vsftpd.py[12103]:     from passlib.hash import mysql41
Nov 21 23:39:51 xenforo /etc/security/pam_dbauth_vsftpd.py[12103]: ImportError: No module named passlib.hash

The mail client ask for password when I want send a mail.

Code: [Select]

warning: SASL authentication failure: Password verification failed


19

Technical Help / *** SECURITY information for domain.ch ***

« on: November 16, 2020, 05:26:27 am »

For about 2 weeks I have been receiving this email at root@domain.ch:

*** SECURITY information for domain.ch ***

domain.ch : Nov 16 11:31:01 : ftp : user NOT in sudoers ; TTY=unknown ; PWD=/srv/ftp ; USER=root ; COMMAND=/sbin/sysctl kernel.nmi_watchdog=0

The notification comes in intervals between 1 to 60 minutes.

Is that an ehcp force problem?
I haven't made any updates since then.

My OS is Debian 10, php7.3, Xenforo 2.1

A colleague has exactly the same thing.

Edit:
I found the mining virus and remove with this tutorial.
I hope is not a vulnerability in EHCP force......

20

Technical Help / Change IP and Domain

« on: September 30, 2020, 08:41:00 am »

How do I change the IP and domain name afterwards so that everything is clean?
I install a forum parallel in another lxc container with a different IP and domain.
If everything goes well, I would like to transfer it to the old IP / domain.
Or is that not recommended?

21

Technical Help / FTP problems

« on: September 29, 2020, 01:54:16 pm »

Suddenly I could no longer establish an FTP connection.

Filezilla says:
Answer: 331 Please specify the password.
Command: PASS **************
Answer: 530 Login incorrect.
Error: Critical Error: Failed to connect to the server

I run bash "ehcpforceupdate.sh". Still not works

Code: [Select]

# service vsftpd status
* vsftpd.service - vsftpd FTP server
   Loaded: loaded (/lib/systemd/system/vsftpd.service; enabled; vendor preset: enabled)
   Active: active (running) since Tue 2020-09-29 22:43:40 CEST; 1h 33min ago
 Main PID: 3507 (vsftpd)
    Tasks: 1 (limit: 4915)
   CGroup: /system.slice/vsftpd.service
           `-3507 /usr/sbin/vsftpd /etc/vsftpd.conf

Sep 29 23:07:12 ltspiceusers systemd[1]: vsftpd.service: Failed to reset devices.list: Operation not permitted
Sep 29 23:07:12 ltspiceusers systemd[1]: vsftpd.service: Failed to reset devices.list: Operation not permitted
Sep 29 23:12:23 ltspiceusers /etc/security/pam_dbauth_vsftpd.py[7552]: Traceback (most recent call last):
Sep 29 23:12:23 ltspiceusers /etc/security/pam_dbauth_vsftpd.py[7552]:   File "/etc/security/pam_dbauth_vsftpd.py", line 64, in <module>
Sep 29 23:12:23 ltspiceusers /etc/security/pam_dbauth_vsftpd.py[7552]:     from passlib.hash import mysql41
Sep 29 23:12:23 ltspiceusers /etc/security/pam_dbauth_vsftpd.py[7552]: ImportError: No module named passlib.hash
Sep 30 00:12:06 ltspiceusers /etc/security/pam_dbauth_vsftpd.py[9628]: Traceback (most recent call last):
Sep 30 00:12:06 ltspiceusers /etc/security/pam_dbauth_vsftpd.py[9628]:   File "/etc/security/pam_dbauth_vsftpd.py", line 64, in <module>
Sep 30 00:12:06 ltspiceusers /etc/security/pam_dbauth_vsftpd.py[9628]:     from passlib.hash import mysql41
Sep 30 00:12:06 ltspiceusers /etc/security/pam_dbauth_vsftpd.py[9628]: ImportError: No module named passlib.hash

How do I go about it?


PS:

roundcube smtp fehler (535) die authentisierung ist fehlgeschlagen

Code: [Select]

# service saslauthd status
* saslauthd.service - LSB: saslauthd startup script
   Loaded: loaded (/etc/init.d/saslauthd; generated)
   Active: active (running) since Wed 2020-09-30 00:01:31 CEST; 16s ago
     Docs: man:systemd-sysv-generator(8)
  Process: 9474 ExecStop=/etc/init.d/saslauthd stop (code=exited, status=0/SUCCESS)
  Process: 9491 ExecStart=/etc/init.d/saslauthd start (code=exited, status=0/SUCCESS)
    Tasks: 5 (limit: 4915)
   CGroup: /system.slice/saslauthd.service
           |-9511 /usr/sbin/saslauthd -a pam -c -m /var/spool/postfix/var/run/saslauthd
           |-9512 /usr/sbin/saslauthd -a pam -c -m /var/spool/postfix/var/run/saslauthd
           |-9513 /usr/sbin/saslauthd -a pam -c -m /var/spool/postfix/var/run/saslauthd
           |-9514 /usr/sbin/saslauthd -a pam -c -m /var/spool/postfix/var/run/saslauthd
           `-9515 /usr/sbin/saslauthd -a pam -c -m /var/spool/postfix/var/run/saslauthd

Sep 30 00:01:45 ltspiceusers /etc/security/pam_dbauth_smtp.py[9515]:     from passlib.hash import mysql41
Sep 30 00:01:45 ltspiceusers /etc/security/pam_dbauth_smtp.py[9515]: ImportError: No module named passlib.hash
Sep 30 00:01:45 ltspiceusers saslauthd[9515]: DEBUG: auth_pam: pam_authenticate failed: Error in service module
Sep 30 00:01:45 ltspiceusers saslauthd[9515]:                 : auth failure: [user=courgette] [service=smtp] [realm=ltspiceusers.ch] [mech=pam] [reason=P
Sep 30 00:01:45 ltspiceusers /etc/security/pam_dbauth_smtp.py[9512]: Traceback (most recent call last):
Sep 30 00:01:45 ltspiceusers /etc/security/pam_dbauth_smtp.py[9512]:   File "/etc/security/pam_dbauth_smtp.py", line 64, in <module>
Sep 30 00:01:45 ltspiceusers /etc/security/pam_dbauth_smtp.py[9512]:     from passlib.hash import mysql41
Sep 30 00:01:45 ltspiceusers /etc/security/pam_dbauth_smtp.py[9512]: ImportError: No module named passlib.hash
Sep 30 00:01:45 ltspiceusers saslauthd[9512]: DEBUG: auth_pam: pam_authenticate failed: Error in service module
Sep 30 00:01:45 ltspiceusers saslauthd[9512]:                 : auth failure: [user=radiata] [service=smtp] [realm=ltspiceusers.ch] [mech=pam] [reason=PAM


System:
Ubuntu 18.04
apache2
ehcp force


Edit:
Now I see the update, sorry. But now I install a new os (Debian Buster). Apart from the email (SSL certificate problems) everything works fine.

22

Technical Help / How to change the php version?

« on: July 22, 2020, 04:52:19 pm »

I also installed php7.4.
The system always goes on the php7.3 paths.
I have seen that you can manage php versions in other panels via GUI.
How do you do that in EHCP Force?

23

Ubuntu / Upgrade from 18.04 to 20.04

« on: April 28, 2020, 12:36:41 pm »

Hello
Is EHCP force ready for Ubuntu 20.04 or should I still wait?

24

Technical Help / Domain webstats

« on: January 29, 2020, 02:04:38 pm »

When creating a domain, there is a folder called websats inside the httpdocs directory.
But it is not accessible due to htaccess protection. What are the credentials stored for accessing it?

25

Technical Help / *Solved* New installation Debian 10 in a Proxmox 6.x LXC

« on: January 24, 2020, 09:28:10 pm »

The install process seems good.
But first enter to the GUI says:

Not Found
The requested URL was not found on this server.
Apache/2.4.38 (Debian) Server at 192.168.1.51 Port 80

Is EHCP force still not compatible with Debian 10?

Edit:
Ubuntu 18.04 Server works ootb

26

Technical Help / Enable only TLS 1.2 in Apache?

« on: October 23, 2019, 03:07:20 pm »

I open "Edit Apache template" and add
SSLProtocol -all +TLSv1.2
in the domain section like this:

Code: [Select]

<VirtualHost *:443>

ServerName   xyz.com
.
.
.
SSLEngine on

        SSLProtocol -all +TLSv1.2

SSLCertificateFile {ssl_cert_path}
SSLCertificateKeyFile {ssl_cert_key_path}
{ssl_cert_chain_setting_with_path}
{customhttp}
{root_password_protected_dirs}
{password_protected_dirs}
{webstats_password_protection}

</VirtualHost>

Then service apache2 restart.
But https://www.ssllabs.com says the same thing as before.
Where does this entry come from?

27

General / Howto: Activate signed ssl certificate

« on: October 16, 2019, 03:53:39 pm »

I buy a cheap Comodo cert from sslpoint.com
All subsequent commands are executed as root. otherwise use sudo.

service apache2 stop
/etc/ssl/private/server.key   #here the content of private key (you will receive this during the purchase)
/etc/ssl/certs/server.crt   #here the content of www_yourDomain_com.crt file
service apache2 start

If not done before, then now "go to your domain" > "options" > "Fix apache Configuration without ssl"
If you install certbot earlier, crontab -e and delete the update job (and apt-get purge certbot).

Have fun ^^

28

Ubuntu / htacces will not be performed

« on: October 14, 2019, 08:44:34 pm »

First: Excuse my terrible english ^^
I run a Ubuntu 18.04 with EHCP force panel.
I have created a domain yyyy.ch
The htaccess file will not be processed.
I show the  /etc/apache2/sites-enabled/default
There is

Code: [Select]

# this file used in Easy Hosting Control Panel (ehcp), www.ehcp.net

<VirtualHost *:80>

    RewriteEngine On
    RewriteCond %{HTTPS} off
    RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
 
RewriteCond %{SERVER_NAME} =email.yyyy.ch [OR]
RewriteCond %{SERVER_NAME} =mail.yyyy.ch [OR]
RewriteCond %{SERVER_NAME} =webmail.yyyy.ch
RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>

# this file used in Easy Hosting Control Panel (ehcp), www.ehcp.net

<VirtualHost *:443>

    ServerName ssl
    DocumentRoot /var/www/new
    <Directory />
        Options +FollowSymLinks
        AllowOverride None
    </Directory>

    <Directory /var/www/vhosts/>
        Options -Indexes -FollowSymLinks -MultiViews
        AllowOverride All
        Order Allow,Deny
        Allow from All
    </Directory>

    <FilesMatch "access_log|error_log">
        Deny from All
    </FilesMatch>
 
    <Files  ~ "\.conf$">
        Order allow,deny
        Deny from all
    </Files>
     
    <Files  ~ "\.txt$">
        Order allow,deny
        Deny from all
    </Files>
 
    <Files  ~ "\.log$">
        Order allow,deny
        Deny from all
    </Files>
 
    <Files  ~ "\.sh$">
        Order allow,deny
        Deny from all
    </Files>

    LogLevel debug
    ErrorLog /var/log/apache2/default.error.log
    CustomLog /var/log/apache2/default.access.log vhost_combined

    SSLEngine on
    SSLCertificateFile /etc/ssl/certs/server.crt
    SSLCertificateKeyFile /etc/ssl/private/server.key
 
    ProxyPassMatch ^(.*\.php)$ fcgi://127.0.0.1:9001/var/www/new/$1
    ProxyFCGISetEnvIf "true" PHP_ADMIN_VALUE "open_basedir=/var/www:/tmp:/usr/share:/etc/roundcube:/etc/phpmyadmin:/var/lib/phpmyadmin:/var/lib/roundcube:/var/log/roundcube; \n upload_tmp_dir=/tmp; \n session.save_path=/var/www/php_sessions;"

</VirtualHost>
 
# a2enmod rewrite
say
Module rewrite already enabled

See also:
https://www.xendach.de/threads/htaccess-wird-nicht-ausgefuehrt.6902/

I run a Xenforo 2.1.4 on this machine and ssl is activated (certbot).
Without htaccess i have no redirects and no security

I do not understand that. Can someone help?