Koozali.org: home of the SME Server

After restore from V9.2 to V10 horde Login no more possible

Offline umbi

  • **
  • 67
  • +0/-0
After restore from V9.2 to V10 horde Login no more possible
« on: November 16, 2021, 05:17:11 AM »
Hello

I have restored from V9.2 to V10 and i gave that server an internal ip for testing (only Localhost access).

Now at first i tried to login into webmail to check if the Mails are ben well migrated, but i cannot login with the users-accounts and correct passwors. Before restoring i had used webmail horde in fresh installed and updated V10 with admin user and admin password and it worket fine.


Code: [Select]
/sbin/e-smith/audittools/newrpmsLoading mirror speeds from cached hostfile
 * base: mirror.fra10.de.leaseweb.net
 * smeaddons: mirror.pialasse.com
 * smeos: mirror.pialasse.com
 * smeupdates: mirror.pialasse.com
 * updates: de.mirrors.clouvider.net
Extra-Pakete
GeoIP.x86_64                            1.6.12-9.el7.sme            @smecontribs
GeoIP-GeoLite-data.noarch               2018.06-7.el7.sme           @smecontribs
GeoIP-GeoLite-data-extra.noarch         2018.06-7.el7.sme           @smecontribs
awstats.noarch                          7.8-2.el7                   @smecontribs
fail2ban-sendmail.noarch                0.11.2-3.el7                @smecontribs
fail2ban-server.noarch                  0.11.2-3.el7                @smecontribs
libicu69.x86_64                         69.1-2.el7.remi             installed
perl-Data-Validate-IP.noarch            0.27-13.el7                 @smecontribs
perl-Geo-IP.x86_64                      1.45-1.of.el7               @smecontribs
php81-php.x86_64                        8.1.0~rc6-1.el7.remi        @remi-safe
php81-php-bcmath.x86_64                 8.1.0~rc6-1.el7.remi        @remi-safe
php81-php-cli.x86_64                    8.1.0~rc6-1.el7.remi        @remi-safe
php81-php-common.x86_64                 8.1.0~rc6-1.el7.remi        @remi-safe
php81-php-enchant.x86_64                8.1.0~rc6-1.el7.remi        @remi-safe
php81-php-fpm.x86_64                    8.1.0~rc6-1.el7.remi        @remi-safe
php81-php-gd.x86_64                     8.1.0~rc6-1.el7.remi        @remi-safe
php81-php-imap.x86_64                   8.1.0~rc6-1.el7.remi        @remi-safe
php81-php-intl.x86_64                   8.1.0~rc6-1.el7.remi        @remi-safe
php81-php-ldap.x86_64                   8.1.0~rc6-1.el7.remi        @remi-safe
php81-php-mbstring.x86_64               8.1.0~rc6-1.el7.remi        @remi-safe
php81-php-mysqlnd.x86_64                8.1.0~rc6-1.el7.remi        @remi-safe
php81-php-opcache.x86_64                8.1.0~rc6-1.el7.remi        @remi-safe
php81-php-pdo.x86_64                    8.1.0~rc6-1.el7.remi        @remi-safe
php81-php-pear.noarch                   1:1.10.13-1.el7.remi        @remi-safe
php81-php-pecl-xmlrpc.x86_64            1.0.0~rc2-3.el7.remi        @remi-safe
php81-php-pecl-zip.x86_64               1.20.0-1.el7.remi           @remi-safe
php81-php-process.x86_64                8.1.0~rc6-1.el7.remi        @remi-safe
php81-php-snmp.x86_64                   8.1.0~rc6-1.el7.remi        @remi-safe
php81-php-soap.x86_64                   8.1.0~rc6-1.el7.remi        @remi-safe
php81-php-sodium.x86_64                 8.1.0~rc6-1.el7.remi        @remi-safe
php81-php-tidy.x86_64                   8.1.0~rc6-1.el7.remi        @remi-safe
php81-php-xml.x86_64                    8.1.0~rc6-1.el7.remi        @remi-safe
php81-runtime.x86_64                    8.1-1.el7.remi              @remi-safe
phpMyAdmin.noarch                       5.1.0-1.el7.sme             @smecontribs
smeserver-awstats.noarch                1.4-3.el7.sme               @smecontribs
smeserver-crontab_manager.noarch        2.4-7.el7.sme               @smecontribs
smeserver-diskusage.noarch              0.2.0-5.el7.sme             @smecontribs
smeserver-fail2ban.noarch               9:0.1.18-19.el7.sme         @smecontribs
smeserver-hwinfo.noarch                 1.2-5.el7.sme               @smecontribs
smeserver-letsencrypt.noarch            0.5-17                      @smecontribs
smeserver-mod_dav.noarch                1.1-7.el7.sme               @smecontribs
smeserver-mod_deflate.noarch            1.2-4.el7.sme               @smecontribs
smeserver-phpmyadmin.noarch             4.0.10.2-11.el7.sme         @smecontribs
smeserver-qmHandle.noarch               1.4-16.el7.sme              @smecontribs
smeserver-remoteuseraccess.noarch       1.3-6.el7.sme               @smecontribs
smeserver-wbl.noarch                    0.5.0-5.el7.sme             @smecontribs
smeserver-webhosting.noarch             0.0.9-13.el7.sme            @smecontribs

Code: [Select]
/sbin/e-smith/audittools/templates/etc/e-smith/templates-custom/70ZendIonCube: MANUALLY_ADDED, ADDITION
/etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf/VirtualHosts40ACME: MANUALLY_ADDED, ADDITION
/etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf/20LoadModule80PHP: MANUALLY_ADDED, OVERRIDE
/etc/e-smith/templates-custom/etc/dar/DailyBackup.dcf/41go-into: MANUALLY_ADDED, ADDITION
/etc/e-smith/templates-custom/etc/crontab/.91_Update_GeoIP_db.swp: MANUALLY_ADDED, ADDITION
/etc/e-smith/templates-custom/etc/php.ini/70ZendIonCube: MANUALLY_ADDED, ADDITION
/etc/e-smith/templates-custom/etc/php.ini/.php.ini.swp: MANUALLY_ADDED, ADDITION
/etc/e-smith/templates-custom/etc/php.ini/12phptmpfolder: MANUALLY_ADDED, ADDITION
/etc/e-smith/templates-custom/etc/squid/squid.conf/75SizeOfCache: MANUALLY_ADDED, ADDITION
/etc/e-smith/templates-custom/etc/squid/squid.conf/72MaxHeaderSize: MANUALLY_ADDED, ADDITION
/etc/e-smith/templates-custom/etc/squid/squid.conf/70StoreAvgObjectSize: MANUALLY_ADDED, OVERRIDE
/etc/e-smith/templates-custom/etc/squid/squid.conf/71MaxCacheTime: MANUALLY_ADDED, ADDITION
/etc/e-smith/templates-custom/home/e-smith/ssl.crt: MANUALLY_ADDED, OVERRIDE


Is that bug known ? i found nothing similar with the search function.  (only the one who had luck with changing password, what wasn't working for me.

Is the error maybe because i added the etc/dehydrated to the dar backup?

Thank you

Umbi
« Last Edit: November 16, 2021, 01:53:03 PM by umbi »

Offline ReetP

  • *
  • 3,292
  • +5/-0
Re: After restore from V9.2 to V10 horde Login no more possible
« Reply #1 on: November 16, 2021, 10:00:17 AM »
As your English is not very good you should have stuck to the simplest back up using USB.

We now have multiple threads with multiple issues and it is not going to be very easy to help you.

First thing is read this especially #2 :

https://forums.contribs.org/index.php/topic,54433.0.html

That will probably fix some things.

Several of your old php templates will not work and will need to be reconfigured for PHP-FPM

...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline umbi

  • **
  • 67
  • +0/-0
Re: After restore from V9.2 to V10 horde Login no more possible
« Reply #2 on: November 16, 2021, 01:59:28 PM »
Hi ReetP

Thank you for your answer.

The topic in the link says "if you cannot access to server-manager" but server-manager works fine.
I try to work up the in the link listed steps on this evening and report here again to be a help for each other with same issues.

I appreciate your help and send you the best wishes.

Umbi

Offline ReetP

  • *
  • 3,292
  • +5/-0
Re: After restore from V9.2 to V10 horde Login no more possible
« Reply #3 on: November 16, 2021, 02:15:24 PM »
Quote
i tried to login into webmail to check if the Mails are ben well migrated, but i cannot login with the users-accounts and correct passwors

Please more carefully, and not quite so literally - webmail is PHP powered:

#2 after I restore my data from my SME9 to my SME10 , I can not access to the web server / server-manager - this includes any other PHP/web based system like webmail

Remove your templates-custom for httpd
. There are chances you have a fragment with reference to php values for php module for httpd. We do not use this anymore, and it creates a fatal error on start of httpd


Quote
/etc/e-smith/templates-custom/etc/php.ini/70ZendIonCube: MANUALLY_ADDED, ADDITION
/etc/e-smith/templates-custom/etc/php.ini/.php.ini.swp: MANUALLY_ADDED, ADDITION
/etc/e-smith/templates-custom/etc/php.ini/12phptmpfolder: MANUALLY_ADDED, ADDITION

Almost certainly this is related to your custom templates - please check you logs as they will most likely contain the answers - /var/log/httpd/error_log etc

Half of those templates are wrong anyway so remove them and try again.

...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline umbi

  • **
  • 67
  • +0/-0
Re: After restore from V9.2 to V10 horde Login no more possible
« Reply #4 on: November 21, 2021, 02:27:35 PM »
Dear ReetP

Thank you verry much for your reply.

I will try following command in migrated V10 Server:

mv /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf /root/
 systemctl restart httpd-e-smith.service

post-upgrade
reboot

If i have understood right, that command will restore the httpd to default template and i sould be able to connect again by user / userpw to webmail.

After that i can reconfigure the i_bays by server-manager to the required settings

I will send an update as soon as possible, to repport success or fail.

Umbi
« Last Edit: November 21, 2021, 02:49:06 PM by umbi »

Offline ReetP

  • *
  • 3,292
  • +5/-0
Re: After restore from V9.2 to V10 horde Login no more possible
« Reply #5 on: November 21, 2021, 02:35:08 PM »
I'd run signal-event webapps-update or console-save or post-upgrade/reboot to make sure all the right templates & services are restarted.
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline umbi

  • **
  • 67
  • +0/-0
Re: After restore from V9.2 to V10 horde Login no more possible
« Reply #6 on: November 21, 2021, 10:58:04 PM »
Hello ReetP

As promised i give here my feedback:

The command

mv /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf /root/
 systemctl restart httpd-e-smith.service

did not worked for me.

When i go to httpd logs, i see:

[ssl:warn] [pid 3680] AH01909: ECC certificate configured for mydomain.com:443 does NOT include an ID which matches the server name

this error is repeated by each domain.

Allso found in the logs:
Init: Name-based SSL virtual hosts only work for clients with TLS server name indication support (RFC 4366)

regards

Umbi

Offline ReetP

  • *
  • 3,292
  • +5/-0
Re: After restore from V9.2 to V10 horde Login no more possible
« Reply #7 on: November 22, 2021, 02:37:52 AM »
Did you use letsencrypt?

Have copied over your old certificates?
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline umbi

  • **
  • 67
  • +0/-0
Re: After restore from V9.2 to V10 horde Login no more possible
« Reply #8 on: November 22, 2021, 06:06:01 PM »
Hello ReetP

Yes i added the letsencrypt folder to the backups.

Offline ReetP

  • *
  • 3,292
  • +5/-0
Re: After restore from V9.2 to V10 horde Login no more possible
« Reply #9 on: November 22, 2021, 06:14:30 PM »
So where did this come from?

Quote
ECC certificate configured
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline umbi

  • **
  • 67
  • +0/-0
Re: After restore from V9.2 to V10 horde Login no more possible
« Reply #10 on: November 23, 2021, 01:09:07 AM »
I don't know :-(

Maybe i should uninstall letsencrypt and crt files and work with server ssl first as i use the test machine in localhost only at the moment?

I apologize - Im a little lost....
« Last Edit: November 23, 2021, 01:21:51 AM by umbi »

Offline TerryF

  • grumpy old man
  • *
  • 1,717
  • +2/-0
Re: After restore from V9.2 to V10 horde Login no more possible
« Reply #11 on: November 23, 2021, 05:37:12 AM »
I apologize - Im a little lost....

na..hang in there mate..its just a test setup, its what they are for, use em and delete em..

are yopu using a VM or real hardware, VM so muche easier, snapshots and what not...anyway..

perhaps, have a cool bevvy and plan next assasult, install a clean sme10, do your restore of the sme9, reinstall contribs, see what transpires, still got problems maybe just use a basic sme9 backup without extra stuff and go to trouble of redoing letsencrypt setup..there are other paths as well...
--
qui scribit bis legit

Offline ReetP

  • *
  • 3,292
  • +5/-0
Re: After restore from V9.2 to V10 horde Login no more possible
« Reply #12 on: November 23, 2021, 09:56:27 AM »
Should be able to force an update of your certificates using

Code: [Select]
dehydrated -c -x
If not read the wiki on how to reset your certicates.

https://wiki.koozali.org/Letsencrypt
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline ReetP

  • *
  • 3,292
  • +5/-0
Re: After restore from V9.2 to V10 horde Login no more possible
« Reply #13 on: November 23, 2021, 09:59:43 AM »
Also note this won't work

Code: [Select]
mv /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf /root/
 systemctl restart httpd-e-smith.service

Because you have not expanded/regenerated any templates. Jusr moved the templates and restarted httpd.

Use signal-event webapps-update or console-save or post-upgrade/reboot.

...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline umbi

  • **
  • 67
  • +0/-0
Re: After restore from V9.2 to V10 horde Login no more possible
« Reply #14 on: November 23, 2021, 06:36:40 PM »
Hi ReetP
Hi TerryF

First thank you for you patience with me :-)

ReetP you're telling me to regenerate the letsencrypt certificates - i can't because i have the productive SME 9.2 still on public IP and the Test V10 computer still on localhost working. So if i havent a port-forward to the test V10 machin an regeneration of certificates can't be done.

Uninstalling letsencrypt and working by openssl given from V10 should be the right way for me.
After all is working fine i can go to forward the ports to the new V10 machin, install letsencrypt and generate new certificates. Can you confirm that way can work?

 TerryF:  im not using VMW its a real machin...   2 machins  1x V9.2 still productive with hurting blocked IMAP access and 1x V10 in testmode migrated only in intranet mode (not reachable from outside).

Wich you much health guys and thank you again

greez
umbi

« Last Edit: November 23, 2021, 06:38:14 PM by umbi »