Server: Debian Squeeze (Used the Perfect Server Guide) Code: root@server1:~# cat htf_report.txt ##### SERVER ##### IP-address (as per hostname): ***.***.***.*** IP-address(es) (as per ifconfig): ***.***.***.*** [INFO] ISPConfig is installed. ##### ISPCONFIG ##### ISPConfig version is 3.0.5.4p5 ##### VERSION CHECK ##### [INFO] php (cli) version is 5.4.38-0+deb7u1 [INFO] php-cgi (used for cgi php in default vhost!) is version 5.4.38-0+deb7u1 ##### PORT CHECK ##### [WARN] Port 8080 (ISPConfig) seems NOT to be listening [WARN] Port 465 (SMTP server SSL) seems NOT to be listening ##### MAIL SERVER CHECK ##### [WARN] I found no "smtps" entry in your postfix master.cf [INFO] this is not critical, but if you want to offer SSL for smtp (not TLS) connections you have to enable this. ##### RUNNING SERVER PROCESSES ##### [INFO] I found the following web server(s): Apache 2 (PID 1381) [INFO] I found the following mail server(s): Postfix (PID 30587) [INFO] I found the following pop3 server(s): Dovecot (PID 31632) [INFO] I found the following imap server(s): Dovecot (PID 31632) [INFO] I found the following ftp server(s): PureFTP (PID 31722) ##### LISTENING PORTS ##### (only () Local (Address) [anywhere]:21 (31722/pure-ftpd) [anywhere]:22 (4515/sshd) [anywhere]:25 (30587/master) [anywhere]:40733 (2683/rpc.statd) [anywhere]:993 (31632/dovecot) [anywhere]:995 (31632/dovecot) [localhost]:10024 (2266/amavisd-new) [localhost]:10025 (30587/master) [anywhere]:3306 (4207/mysqld) [anywhere]:587 (30587/master) [localhost]:11211 (3837/memcached) [anywhere]:110 (31632/dovecot) [anywhere]:143 (31632/dovecot) [anywhere]:111 (2652/rpcbind) *:*:*:*::*:21 (31722/pure-ftpd) *:*:*:*::*:22 (4515/sshd) *:*:*:*::*:33591 (2683/rpc.statd) *:*:*:*::*:25 (30587/master) *:*:*:*::*:443 (1381/apache2) *:*:*:*::*:993 (31632/dovecot) *:*:*:*::*:995 (31632/dovecot) *:*:*:*::*:8580 (1381/apache2) *:*:*:*::*:587 (30587/master) [localhost]10 (31632/dovecot) [localhost]43 (31632/dovecot) [localhost]11 (2652/rpcbind) *:*:*:*::*:80 (1381/apache2) *:*:*:*::*:8081 (1381/apache2) ##### IPTABLES ##### Chain INPUT (policy ACCEPT) target prot opt source destination fail2ban-dovecot-pop3imap tcp -- [anywhere]/0 [anywhere]/0 multiport dports 110,995,143,993 fail2ban-pureftpd tcp -- [anywhere]/0 [anywhere]/0 multiport dports 21 fail2ban-sasl tcp -- [anywhere]/0 [anywhere]/0 multiport dports 25 fail2ban-ssh tcp -- [anywhere]/0 [anywhere]/0 multiport dports 22 Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain fail2ban-dovecot-pop3imap (1 references) target prot opt source destination RETURN all -- [anywhere]/0 [anywhere]/0 Chain fail2ban-pureftpd (1 references) target prot opt source destination RETURN all -- [anywhere]/0 [anywhere]/0 Chain fail2ban-sasl (1 references) target prot opt source destination RETURN all -- [anywhere]/0 [anywhere]/0 Chain fail2ban-ssh (1 references) target prot opt source destination RETURN all -- [anywhere]/0 [anywhere]/0 I'm aware of the port issue above, ISPConfig is listening on port :8580 instead. Code: [Sat Mar 21 09:55:39 2015] [warn] [client 41.203.67.166] mod_fcgid: stderr: PHP Warning: mysqli::escape_string(): Couldn't fetch db in /usr/local/ispconfig/interface/lib/classes/db_mysql.inc.php on line 261, referer: https://45.x.x.x:8580/ [Sat Mar 21 09:55:39 2015] [warn] [client 41.203.67.166] mod_fcgid: stderr: PHP Warning: mysqli::close(): Couldn't fetch db in /usr/local/ispconfig/interface/lib/classes/db_mysql.inc.php on line 82, referer: https://45.x.x.x:8580/ [Sat Mar 21 09:55:39 2015] [warn] [client 41.203.67.166] mod_fcgid: stderr: PHP Warning: mysqli::close(): Couldn't fetch db in /usr/local/ispconfig/interface/lib/classes/db_mysql.inc.php on line 82, referer: https://45.x.x.x:8580/ PHP Deprecated: Comments starting with '#' are deprecated in /etc/php5/cgi/conf.d/ming.ini on line 1 in Unknown on line 0 /usr/local/ispconfig/interface/lib/classes/db_mysql.inc.php At first, after opening this file, the database connection variables had no values, I manually logged into MySQL, confirmed the database and access credentials then fed same to the db_mysql.inc.php as shown below: Didn't help. Code: class db extends mysqli { private $dbHost = 'localhost'; // hostname of the MySQL server private $dbName = 'dbispconfig'; // logical database name on that serv$ private $dbUser = 'root'; // database authorized user private $dbPass = 'myrootpass'; // user's password private $dbCharset = 'utf8';// Database charset private $dbNewLink = false; // Return a new linkID when connect is call$ private $dbClientFlags = 0; // MySQL Client falgs private $linkId = 0; // last result of mysqli_connect() private $queryId = 0; // last result of mysqli_query() private $record = array(); // last record fetched private $autoCommit = 1; // Autocommit Transactions private $currentRow; // current row number private $errorNumber = 0; // last error number public $errorMessage = ''; // last error message private $errorLocation = '';// last error location
Please undo the manual changes that you made in the ispconfig code, they are a huge security risk as the root user may not be used here. Then take the user "ispconfig" and the password for this user from the file /usr/local/ispconfig/interface/web/config.inc.php and test the mysql login on the shell with: mysql -h localhost -u ispconfig -p dbispconfig the command will then ask for the mysql password of the ispconfig user.
Well, I got things working by changing the values in the relevant configuration files to let ISPConfig connect as root, but I'm going to go back and try to get this working with the dbispconfig user. I will post the results. Thanks, till.
