Jump to content
Froxlor Forum
d00p

Release candidate 0.10.0 - It's Froxlor, but with API :)

Recommended Posts

i had it installed before as a package can there be a problem when the package was uninstalled and i uploaded the data via ftp?

Share this post


Link to post
Share on other sites

No, as said, the initial services config is not automatically called

Share this post


Link to post
Share on other sites

I believe you already.

But where does it come from if I didn't execute anything? that wasn't even possible because the problem occurred in the middle of the update process.

Share this post


Link to post
Share on other sites

In the package "froxlor-0.10.0-rc2.tar.gz" the "froxlor_master_cronjob.php" is not executable. Couldn't this be stored in tar.gz?

I only came across it because I had to update it manually and the crons didn't run through.

Share this post


Link to post
Share on other sites
10 minutes ago, Tealk said:

In the package "froxlor-0.10.0-rc2.tar.gz" the "froxlor_master_cronjob.php" is not executable. Couldn't this be stored in tar.gz?

I only came across it because I had to update it manually and the crons didn't run through.

it's run with "php", not directly...cron works fine here on my servers

Share this post


Link to post
Share on other sites

How is your cron run? can you please specify what exactly it is you do? It's hard to help with so few information

Share this post


Link to post
Share on other sites

I raised froxlor to 0.10 before the Debian update. Renamed the old folder and restored the config file.
Since then I haven't changed anything in the settings.
After the Debian Update I have removed old cipher and noticed that the cron doesn't work anymore.
When I make the file "froxlor_master_cronjob.php" executable it runs as usual again.

I had installed Froxlor before as a package, that was uninstalled during the update of Debian.

Share this post


Link to post
Share on other sites

That does not answer the question how you run the cronjob...

Share this post


Link to post
Share on other sites

With the following file:

/etc/cron.d/froxlor

# automatically generated cron-configuration by froxlor
# do not manually edit this file as it will be re-generated periodically.
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
#
*/5 * * * * root /usr/bin/nice -n 5 /usr/bin/php7.2 -q /var/www/froxlor//scripts/froxlor_master_cronjob.php --tasks 1> /dev/null
0 0 * * * root /usr/bin/nice -n 5 /usr/bin/php7.2 -q /var/www/froxlor//scripts/froxlor_master_cronjob.php --traffic 1> /dev/null
5 0 * * * root /usr/bin/nice -n 5 /usr/bin/php7.2 -q /var/www/froxlor//scripts/froxlor_master_cronjob.php --usage_report 1> /dev/null
0 */6 * * * root /usr/bin/nice -n 5 /usr/bin/php7.2 -q /var/www/froxlor//scripts/froxlor_master_cronjob.php --mailboxsize 1> /dev/null
*/5 * * * * root /usr/bin/nice -n 5 /usr/bin/php7.2 -q /var/www/froxlor//scripts/froxlor_master_cronjob.php --letsencrypt 1> /dev/null
10 0 * * * root /usr/bin/nice -n 5 /usr/bin/php7.2 -q /var/www/froxlor//scripts/froxlor_master_cronjob.php --backup 1> /dev/null

 

Share this post


Link to post
Share on other sites

My cronjob has the following permissions and works just fine:

-rw-r--r--  1 froxlor froxlor  641 Jan  2  2019 froxlor_master_cronjob.php

 

Share this post


Link to post
Share on other sites

Like I said I have to give the user executive permissions. Why don't I know and currently don't know where to start investigating.

Share this post


Link to post
Share on other sites

And like I said, works for me flawlessly, no idea what you've done to your system...seems like you a few issues here

Share this post


Link to post
Share on other sites

As recommended I copied my database to a fresh Debian 10 and started the internal update. Changed the IP and got stuck. Apache doesn't start due:

AH00526: Syntax error on line 11 of /etc/apache2/sites-enabled/28_froxlor_normal_vhost_web1.s01.XXXX.info.conf:
Invalid command 'php_admin_value', perhaps misspelled or defined by a module not included in the server configuration

These are the lines for open basedir and email. Any recommendations how to fix this?

If I remove all php_admin_value Entries from all fines it is running fine.

Share this post


Link to post
Share on other sites

I enabled mod_php, looked into it ten times and still missed that it was disabled again...

Thx a lot.

 

Another strange thing I found is that I disabled a customer and tried to reenable it. Ending here:

A database error occurred
SQLSTATE[42000]: Syntax error or access violation: 1044 Access denied for user 'froxlor_root'@'127.0.0.1' to database 'web8sql1'
Dear froxlor-team,

the following error has been reported by a user:

-------------------------------------------------------------
42000 SQLSTATE[42000]: Syntax error or access violation: 1044 Access denied for user 'froxlor_root'@'127.0.0.1' to database 'web8sql1'

File: lib/Froxlor/Database/Database.php:203

Trace:
#0 [internal function]: PDO->query('GRANT ALL PRIVI...')
#1 lib/Froxlor/Database/Database.php(203): call_user_func_array(Array, Array)
#2 lib/Froxlor/Database/Manager/DbManagerMySQL.php(203): Froxlor\Database\Database::__callStatic('query', Array)
#3 lib/Froxlor/Api/Commands/Customers.php(1081): Froxlor\Database\Manager\DbManagerMySQL->enableUser('web8sql1', '127.0.0.1')
#4 admin_customers.php(376): Froxlor\Api\Commands\Customers->update()
#5 {main}

-------------------------------------------------------------

Froxlor-version: 0.10.0-rc2
DB-version: 201904250

End of report

User froxlor_root got full global rights. So this shouldn't be a problem. Any guesses?

Share this post


Link to post
Share on other sites

Could you please try to reproduce this using the real root user to be sure it's not a permission issue?

Share this post


Link to post
Share on other sites

That doesn't change anything.

SQLSTATE[42000]: Syntax error or access violation: 1044 Access denied for user 'root'@'127.0.0.1' to database 'web8sql1'

But I think that isn't intended to work. Newer releases only accept root from shell if you are currently a root user.

Share this post


Link to post
Share on other sites
8 hours ago, mike87 said:

But I think that isn't intended to work.

But it needs to work for froxlor. In order to manage mysql databases and users we need a privileged user.

Share this post


Link to post
Share on other sites
vor 5 Stunden schrieb d00p:

But it needs to work for froxlor. In order to manage mysql databases and users we need a privileged user.

I know. I just wanted you to know about this problem. Debian 10/MariaDB 10.3 uses unix_socket as plugin for the root user. So this isn't working anymore and you have to create another root-like user.

That's why I use froxlor_root with full global rights, identified by password from 127.0.0.1/localhost/server-ip.

Connecting via shell is working: mysql -u froxlor_root -p

May you know the SQL-statement so I could test it via shell?

Share this post


Link to post
Share on other sites

This was an issue even before Debian buster. There are many many topics here how to fix that. Also, a fresh install should do the required steps. 

3 minutes ago, mike87 said:

May you know the SQL-statement so I could test it via shell

As said, search the Forum, it's on here a few times, try searching for "update mysql.user" maybe

Share this post


Link to post
Share on other sites

Before I imported the old database I did a fresh install and my froxlor_root user was accepted.

It took me some time but I found the issue. MariaDB got a bug in 10.3. Granting ALL PRIVILEGES lacks DELETE HISTORY. So another grant ALL PRIVILEGES fails. You need to grant all priviliges manually and it is working. (See Bug Report)

Share this post


Link to post
Share on other sites

Hey d00p,

I updated/upgraded from 0.9.40.1 to this RC and now getting this after the login page:

Zitat

Fatal error: Uncaught Error: Class 'Settings' not found in /var/www/froxlor/lib/navigation/10.tickets.php:25 Stack trace: #0 /var/www/froxlor/lib/Froxlor/PhpHelper.php(165): include() #1 /var/www/froxlor/lib/init.php(423): Froxlor\PhpHelper::loadConfigArrayDir('lib/navigation/') #2 /var/www/froxlor/admin_index.php(20): require('/var/www/froxlo...') #3 {main} thrown in /var/www/froxlor/lib/navigation/10.tickets.php on line 25

I downloaded the package and unzipped it to my desktop and then uploaded all the files into my froxlor folder on my server with overwriting existing files. Any help here would be nice.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Similar Content

    • By d00p
      Dear Froxlor Community,
      I am proud to finally release the stable version of a new API based froxlor. Due to massive internal improvements and changes in the core (almost 600 commits since 0.9.40.1) users are now able to list/create/edit/delete resources and entities of froxlor via API (requires activation of api-usage in the settings and a user based API-key). The froxlor frontend itself uses the API backend too.
      Froxlor now uses composer to include some of its requirements like phpMailer, Logger, IdnaConvert and TwoFactorAuth libraries. All required files will be included in the official tarball so you do not need to worry about installing and using composer (only if you are using / testing the git-master, see https://github.com/Froxlor/Froxlor/wiki/Install-froxlor-from-git-sources).
      Most important changes:
      froxlor now requires at least php-7.0 or newer, php-5.6 is no longer supported because of its EOL almost a year ago you can access data via API, for more information see https://api.froxlor.org/doc/. An example can be found here: https://github.com/Froxlor/Froxlor/tree/master/doc/example PHPUnit tested API backend with MySQL 5.6, 5.7 and 8 as well as MariaDB 10.3 and 10.4, see https://travis-ci.com/Froxlor/Froxlor compatibility for MySQL8 2FA (two-factor-authentication) for admins/resellers/customers (email or authenticator app) all froxlor-database tables will automatically be converted to the InnoDB engine added support for Debian 10 (buster) and Ubuntu 18.04 (bionic beaver) implemented Let's Encrypt via acme.sh - Note: all your current Let's Encrypt certificates will be removed and re-created due to another structure customizable error/access log handling for webserver (format, level, pipe-to-script, etc.) deprecated Debian 7 (wheezy) and Ubuntu 14.04 (trusty tahr) support dropped support for Ubuntu 12.04 (precise pangolin) dropped ticketsystem Changes in 0.10.1:
      allow/disallow API access on a per-customer base new API parameters for Admins.add(), Admins.update(), Customers.add() and Customers.update() bool $api_allowed (default: false for Customers, true for Admins) add explicit tlsv1.3 ciphersuite setting fixed wrong behaviour in Ftps.add() if customer is newly created and setting customer.ftpatdomain is true added expiration date to SSL certificates loaded via API request fixed wrong return in Certificates.get() if given domain does not have a certificate allow setting http2 flag for (sub)domains in customer view, fixes #725 Changes in 0.10.2:
      force Let's Encrypt ACMEv2 API, fixed #728 added default-ssl-vhost settings and optionally allow including of non-ssl default-vhost settings, fixes #727 new API parameters for Domains.add() and Domains.update() string $ssl_specialsettings bool $include_specialsettings bool $dont_use_default_ssl_ipandport_if_empty removed API parameters in Domains.add() bool $use_default_ssl_ipandport_if_empty new API parameters for IpsAndPorts.add() and IpsAndPorts.update() string $ssl_specialsettings bool $include_specialsettings string $ssl_default_vhostconf_domain bool $include_default_vhostconf_domain implemented DomainZones.listing() to return custom stored dns entries fix registration and termination date to flip between empty-value and 0000-00-00 Changes in 0.10.3:
      fallback to /tmp/froxlor.log if file-log is activated but no file given or not writeable; fixes #737 added tls-settings per domain for admins with change_serversettings-flag set; fixes #519 new API parameter for Domains.add() and Domains.update() bool $override_tls (default: false) array $ssl_protocols string $ssl_cipher_list string $tlsv13_cipher_list preserve downward compatibility for 0.10.1 updaters regarding specialsettings for ssl-enabled domains; fixes #739 Changes in 0.10.4:
      added support for CIDR/netmask in mysql-access-hosts; fixes #564 fixed invalid handling of escape-sequences in api-endpoint, fixes #746 fixed an issue with adding the default ftp user for new customer when added by admin/reseller with no ftp-resources; fixes #741 fixed nginx configuration issue with fastcgi_split_path_info option; fixes #744 Changes in 0.10.5:
      bugfix release due to errors in Let's Encrypt re-new check; fixes #747 Changes in 0.10.6:
      introducing new API parameters sql_search, sql_limit, sql_offset, sql_orderby for almost all listing() calls introducing new API method listingCount() for almost all modules to return the total number of entities available changed behavior of SubDomains.listing() to return all fields from the domain table instead of the limited ones for customers when called as admin added new API module SysLog to query froxlor logs according to permission optimized panel_admins and panel_customers table to avoid mysql/mariadb warning: Row size too large (> 8126); fixes #752 corrected update of hosting plans via interface; fixes #753 implemented API method EmailForwarders.listing(); fixes #754 fixed parameters defaults for Domains.update() parameters ssl_ipandports and add new parameter (see below); fixes #756 new API parameters for Domains.update() bool $remove_ssl_ipandport Changes in 0.10.7:
      corrected behavior when changing mysql-access-host values; fixes #758 fix UI error "API keys not accessable due to missing Paging-class" fix trauncating of SysLog using SysLog.delete() corrected UI issue of incorrect listing of domains for customers and admin, fixes #759 corrected ordering of listings in UI regarding pagination added new settings to set default value of domain-edit-settings 'Apply specialsettings to all subdomains' and 'Apply php-config to all subdomains' corrected vhost-merging of specialsettings in nginx; fixes #757 Changes in 0.10.8:
      fix duplicate domain entries in customer-domain-list when domain has aliases fix searching for alias-domains by link in customer_domains use correct apiendpoint for lets encrypt; pass debug-flag onto acme.sh; fixes #762 fix removing of ssl-ip-relation to domain if no ssl-ip is selected via interface Debian package: Move mysql server dependency to redommends; fixes #761 Changes in 0.10.9:
      fix SQL error when searching for certificates by domainname, fixes #764 fix ordering of listings when natural sorting is activated, fixes #765 check for valid result when reading database usage from information_schema; fixes #766 Download: 0.10.9

      Note: Debian/Ubuntu packages are available as of 21th of October 2019 - Note that there are no packages for oldoldstable (jessie) anymore
      Attention: The auto-update feature is currently not working correctly for updaters from 0.9.x due to the archive taking a bit longer to extract and froxlor trying to redirect too soon thus leading to an internal server error. A quick reload does "fix" the problem. To avoid that please use the manual update options, see https://github.com/Froxlor/Froxlor/wiki

      Visit http://www.froxlor.org or join our IRC channel #froxlor on irc.freenode.net for support, help, participation or just a chat

      Thank you,
      d00p
    • By ZARk
      Hello

      I can't renew certs (or create new certs) since the 0.10 upgrade. was working fine before on 0.9

      I'm basically getting the same output everytime i run this command.
       
      xander /var/www/froxlor # /usr/bin/php7.3 -q /var/www/froxlor/scripts/froxlor_master_cronjob.php --letsencrypt --debug [information] Requesting/renewing Let's Encrypt certificates [information] Creating certificate for Westecheurope.eu [information] Adding SAN entry: Westecheurope.eu [information] Adding SAN entry: www.Westecheurope.eu [Mon 4 Nov 11:23:46 CET 2019] It is recommended to install socat first. [Mon 4 Nov 11:23:46 CET 2019] We use socat for standalone server if you use standalone mode. [Mon 4 Nov 11:23:46 CET 2019] If you don't use standalone mode, just ignore this warning. [information] Checking for LetsEncrypt client upgrades before renewing certificates: [Mon 4 Nov 11:23:45 CET 2019] Installing from online archive. [Mon 4 Nov 11:23:45 CET 2019] Downloading https://github.com/Neilpang/acme.sh/archive/master.tar.gz [Mon 4 Nov 11:23:46 CET 2019] Extracting master.tar.gz [Mon 4 Nov 11:23:46 CET 2019] Installing to /root/.acme.sh [Mon 4 Nov 11:23:46 CET 2019] Installed to /root/.acme.sh/acme.sh [Mon 4 Nov 11:23:46 CET 2019] Good, bash is found, so change the shebang to use bash as preferred. [Mon 4 Nov 11:23:47 CET 2019] OK [Mon 4 Nov 11:23:47 CET 2019] Install success! [Mon 4 Nov 11:23:47 CET 2019] Upgrade success! [Mon 4 Nov 11:23:47 CET 2019] Removing cron job [Mon 4 Nov 11:23:52 CET 2019] get to authz error. [Mon 4 Nov 11:23:52 CET 2019] _authorizations_map='www.westecheurope.eu,{"identifier":{"type":"dns","value":"www.westecheurope.eu"},"status":"pending","expires":"2019-11-07T18:17:12Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/1025077162/e3Lmew","token":"H07E0jvAJ-vnQ4jirnVIxqLeRxDwQ_VC6PQ0RAJgEvU"},{"type":"dns-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/1025077162/rs0T6w","token":"H07E0jvAJ-vnQ4jirnVIxqLeRxDwQ_VC6PQ0RAJgEvU"},{"type":"tls-alpn-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/1025077162/ZPjfSg","token":"H07E0jvAJ-vnQ4jirnVIxqLeRxDwQ_VC6PQ0RAJgEvU"}]} westecheurope.eu,{"identifier":{"type":"dns","value":"westecheurope.eu"},"status":"pending","expires":"2019-11-07T18:17:12Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/1025077160/hOWGhQ","token":"Bd7XDicTn8dtJBIYc9Eod2d7eOxZGba42pnnl5aCNyI"},{"type":"dns-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/1025077160/nj7_Ow","token":"Bd7XDicTn8dtJBIYc9Eod2d7eOxZGba42pnnl5aCNyI"},{"type":"tls-alpn-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/1025077160/v7Bc7A","token":"Bd7XDicTn8dtJBIYc9Eod2d7eOxZGba42pnnl5aCNyI"}]} ' [Mon 4 Nov 11:23:52 CET 2019] Please add '--debug' or '--log' to check more details. [Mon 4 Nov 11:23:52 CET 2019] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh [debug] [Mon 4 Nov 11:23:48 CET 2019] Creating domain key [Mon 4 Nov 11:23:49 CET 2019] The domain key is here: /root/.acme.sh/Westecheurope.eu/Westecheurope.eu.key [Mon 4 Nov 11:23:49 CET 2019] Multi domain='DNS:Westecheurope.eu,DNS:www.Westecheurope.eu' [Mon 4 Nov 11:23:50 CET 2019] Getting domain auth token for each domain [Mon 4 Nov 11:23:52 CET 2019] Getting webroot for domain='Westecheurope.eu' [error] Could not get Let's Encrypt certificate for Westecheurope.eu: [Mon 4 Nov 11:23:48 CET 2019] Creating domain key [Mon 4 Nov 11:23:49 CET 2019] The domain key is here: /root/.acme.sh/Westecheurope.eu/Westecheurope.eu.key [Mon 4 Nov 11:23:49 CET 2019] Multi domain='DNS:Westecheurope.eu,DNS:www.Westecheurope.eu' [Mon 4 Nov 11:23:50 CET 2019] Getting domain auth token for each domain [Mon 4 Nov 11:23:52 CET 2019] Getting webroot for domain='Westecheurope.eu' [information] No new certificates or certificates due for renewal found [notice] Checking system's last guid  
×
×
  • Create New...