roundcube e phpmyadmin no login

Discussion in 'HOWTO-Related Questions' started by mircopoint, Oct 12, 2017.

  1. mircopoint

    mircopoint New Member

    fter updating my server on Ubuntu 16.04.03, (perfect server) I can not log in roundcube and phpmyadmin anymore, the window once entered credentials, returns to itself without error messages. how can I fix it?
     
  2. ztk.me

    ztk.me Well-Known Member HowtoForge Supporter

    turn on
    Code:
    $config['debug_level'] = 4;
    for roundcube ( might be already be in your /etc/roundcube/config.inc.php )

    But a big plus would be: What does the logs say? ( /etc/apache2/error.log - maybe you can find something in the other_vhosts_access.log )

    roundcube might log to /var/log/roundcube/
    however, I don't speak ubuntu that good paths might differ but should be easily guesseable
     
    mircopoint likes this.
  3. mircopoint

    mircopoint New Member

    Error: Failed to load config from /var/lib/roundcube/plugins/jqueryui/config.inc.php in /usr/share/roundcube/program/lib/Roundcube/rcube_plugin.php on line 157 (GET /roundcube/)
     
  4. ztk.me

    ztk.me Well-Known Member HowtoForge Supporter

    compare
    Code:
    ls -Alah /var/lib/roundcube/plugins/
    
    and
    Code:
    ls -Alah /usr/share/roundcube/plugins/
    
    aswell as making sure the links from /var/lib/rc/plugins/* are valid links to their /usr/share location.
    you can add missing links by
    Code:
    ln -s /usr/share/roundcube/plugins/pluginname /var/lib/roundcube/plugins/
    
    just replace pluginname for the first path only

    Btw.
    /var/lib/roundcube/plugins/jqueryui/config.inc.php on my stretchy system is simply empty
    Code:
    <?php
    // Empty configuration for jqueryui
    // See /usr/share/roundcube/plugins/jqueryui/config.inc.php.dist for instructions
    // Check the access right of the file if you put sensitive information in it.
    $config=array();
    ?>
    
     
  5. mircopoint

    mircopoint New Member

    thanks for your patience :confused:, I did the verifications you suggested to me, and it's all right. I can not figure out how to fix it, the problem that the server is online and several users used roundcube, and rightly complain. could I re-install roundcube or the most dated but sure squirrelmail?
    my fear that the problem is apache and not roundcube, all after a security update has started!
     
  6. ztk.me

    ztk.me Well-Known Member HowtoForge Supporter

    hmm you might check the rouncube config for your webserver, in the mods-enabld or conf-enabled, is it a symlink to /etc/roundcibe/apache.conf ( or similar ) still?

    You could aswell try https://www.howtoforge.com/communit...-enigma-munin-phpmyadmin-using-php-fpm.77489/
    in the meantime if you like - it's made for debian, so please double check wether your roundcube.conf or phpmyadmin.conf appear on different paths / you can get the differences for the apache configuration off the conf/mod enabled .conf files which would maybe replaced by some Location moved to there Header for default calls of that alias ;)
     
  7. mircopoint

    mircopoint New Member

    I suggest I'm not a ubuntu superuser, I can use it and know the structure, but I'm not a wizard!
    then we old :eek:Italians with English are denied.
    ------------------------------------- etc/roundcube/apache.conf----------------------------------------------------
    # Those aliases do not work properly with several hosts on your apache server
    # Uncomment them to use it or adapt them to your configuration
    Alias /roundcube /var/lib/roundcube

    <Directory /var/lib/roundcube/>
    AddType application/x-httpd-php .php
    Options +FollowSymLinks
    # This is needed to parse /var/lib/roundcube/.htaccess. See its
    # content before setting AllowOverride to None.
    AllowOverride All
    <IfVersion >= 2.3>
    Require all granted
    </IfVersion>
    <IfVersion < 2.3>
    Order allow,deny
    Allow from all
    </IfVersion>
    </Directory>

    --------------------------------------------------------end-------------------------------------------
     
  8. ztk.me

    ztk.me Well-Known Member HowtoForge Supporter

    so I did the howto on a test VM, ended up with the following:

    check symlinks are there as
    /etc/apache2/conf-enabled
    Code:
    lrwxrwxrwx 1 root root   33 Okt 13 13:24 phpmyadmin.conf -> ../conf-available/phpmyadmin.conf
    lrwxrwxrwx 1 root root   32 Okt 13 13:34 roundcube.conf -> ../conf-available/roundcube.conf
    
    /etc/apache2/conf-available
    Code:
    lrwxrwxrwx 1 root root   26 Okt 13 13:34 roundcube.conf -> /etc/roundcube/apache.conf
    lrwxrwxrwx 1 root root   28 Okt 13 13:24 phpmyadmin.conf -> ../../phpmyadmin/apache.conf
    
    /etc/apache2/conf-available/roundcube.conf
    Code:
    # Those aliases do not work properly with several hosts on your apache server
    # Uncomment them to use it or adapt them to your configuration
        Alias /roundcube /var/lib/roundcube
    
    <Directory /var/lib/roundcube/>
      AddType application/x-httpd-php .php
      Options +FollowSymLinks
      # This is needed to parse /var/lib/roundcube/.htaccess. See its
      # content before setting AllowOverride to None.
      AllowOverride All
      <IfVersion >= 2.3>
        Require all granted
      </IfVersion>
      <IfVersion < 2.3>
        Order allow,deny
        Allow from all
      </IfVersion>
    </Directory>
    
    # Protecting basic directories:
    <Directory /var/lib/roundcube/config>
            Options -FollowSymLinks
            AllowOverride None
    </Directory>
    
    <Directory /var/lib/roundcube/temp>
            Options -FollowSymLinks
            AllowOverride None
            <IfVersion >= 2.3>
              Require all denied
            </IfVersion>
            <IfVersion < 2.3>
              Order allow,deny
              Deny from all
            </IfVersion>
    </Directory>
    
    <Directory /var/lib/roundcube/logs>
            Options -FollowSymLinks
            AllowOverride None
            <IfVersion >= 2.3>
              Require all denied
            </IfVersion>
            <IfVersion < 2.3>
              Order allow,deny
              Deny from all
            </IfVersion>
    </Directory>
    

    /etc/apache2/conf-available/phpmyadmin.conf
    Code:
    # phpMyAdmin default Apache configuration
    
    Alias /phpmyadmin /usr/share/phpmyadmin
    
    <Directory /usr/share/phpmyadmin>
        Options FollowSymLinks
        DirectoryIndex index.php
    
        <IfModule mod_php.c>
            <IfModule mod_mime.c>
                AddType application/x-httpd-php .php
            </IfModule>
            <FilesMatch ".+\.php$">
                SetHandler application/x-httpd-php
            </FilesMatch>
    
            php_flag magic_quotes_gpc Off
            php_flag track_vars On
            php_flag register_globals Off
            php_admin_flag allow_url_fopen On
            php_value include_path .
            php_admin_value upload_tmp_dir /var/lib/phpmyadmin/tmp
            php_admin_value open_basedir /usr/share/phpmyadmin/:/etc/phpmyadmin/:/var/lib/phpmyadmin/:/usr/share/php/php-gettext/:/usr/share/javascript/:/usr/share/php/tcpdf/:/usr/share/doc/phpmyadmin/:/usr/share/php/phpseclib/
        </IfModule>
    
    </Directory>
    
    # Authorize for setup
    <Directory /usr/share/phpmyadmin/setup>
        <IfModule mod_authz_core.c>
            <IfModule mod_authn_file.c>
                AuthType Basic
                AuthName "phpMyAdmin Setup"
                AuthUserFile /etc/phpmyadmin/htpasswd.setup
            </IfModule>
            Require valid-user
        </IfModule>
    </Directory>
    
    # Disallow web access to directories that don't need it
    <Directory /usr/share/phpmyadmin/libraries>
        Require all denied
    </Directory>
    <Directory /usr/share/phpmyadmin/setup/lib>
        Require all denied
    </Directory>
    
    maybe check permissions, too

    /etc/phpmyadmin contains:
    Code:
    total 52K
    drwxr-xr-x   3 root root     4,0K Okt 13 13:24 .
    drwxr-xr-x 108 root root     4,0K Okt 13 13:37 ..
    -rw-r--r--   1 root root     1,5K Mär 31  2016 apache.conf
    drwxr-xr-x   2 root root     4,0K Jun 17  2016 conf.d
    -rw-r-----   1 root www-data  523 Okt 13 13:24 config-db.php
    -rw-r--r--   1 root root      168 Okt 29  2015 config.footer.inc.php
    -rw-r--r--   1 root root      168 Okt 29  2015 config.header.inc.php
    -rw-r--r--   1 root root     6,2K Jan 30  2016 config.inc.php
    -rw-r-----   1 root www-data    8 Okt 13 13:24 htpasswd.setup
    -rw-r--r--   1 root root      570 Okt 29  2015 lighttpd.conf
    -rw-r--r--   1 root root      198 Okt 29  2015 phpmyadmin.desktop
    -rw-r--r--   1 root root      295 Okt 29  2015 phpmyadmin.service
    
    /etc/roundcube contains
    Code:
    total 92K
    drwxr-xr-x   3 root root     4,0K Okt 13 13:36 .
    drwxr-xr-x 108 root root     4,0K Okt 13 13:37 ..
    -rw-r--r--   1 root root     1,3K Okt 13 13:35 apache.conf
    -rw-r-----   1 root www-data 3,5K Okt 13 13:36 config.inc.php
    -rw-r-----   1 root www-data  520 Okt 13 13:34 debian-db.php
    -rw-r--r--   1 root root      373 Dez 29  2015 debian-db-roundcube.php
    -rw-r--r--   1 root root      51K Apr  6  2016 defaults.inc.php
    -rw-r--r--   1 root root     1,9K Apr  6  2016 htaccess
    -rw-r--r--   1 root root      491 Dez 29  2015 lighttpd.conf
    -rw-r--r--   1 root root     2,8K Nov 23  2015 mimetypes.php
    drwxr-xr-x  21 root root     4,0K Okt 13 13:34 plugins
    


    otherwise please post the /var/log/apache2/error.log for further info
     
  9. mircopoint

    mircopoint New Member

    Thank you, I have compared your parameters, and that's all right! I attach you to apache2 error.log. the last two lines, are related to the failed roundcube login.

    in fact the file, in that location is not present!!


    logs
    [Thu Oct 19 06:25:04.992843 2017] [auth_digest:notice] [pid 12366] AH01757: generating secret for digest authentication ...
    [Thu Oct 19 06:25:05.013012 2017] [:notice] [pid 27829] FastCGI: process manager initialized (pid 27829)
    [Thu Oct 19 06:25:05.274051 2017] [:error] [pid 12366] python_init: Python version mismatch, expected '2.7.6', found '2.7.12'.
    [Thu Oct 19 06:25:05.274185 2017] [:error] [pid 12366] python_init: Python executable found '/usr/bin/python'.
    [Thu Oct 19 06:25:05.274193 2017] [:error] [pid 12366] python_init: Python path being used '/usr/lib/python2.7/:/usr/lib/python2.7/plat-i386-linux-gnu:/usr/lib/python2.7/lib-tk:/usr/lib/python2.7/lib-old:/usr/l$
    [Thu Oct 19 06:25:05.274210 2017] [:notice] [pid 12366] mod_python: Creating 8 session mutexes based on 150 max processes and 0 max threads.
    [Thu Oct 19 06:25:05.274222 2017] [:notice] [pid 12366] mod_python: using mutex_directory /tmp
    [Thu Oct 19 06:25:05.462287 2017] [ssl:warn] [pid 12366] AH01906: serweb.mircopoint:8080:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
    [Thu Oct 19 06:25:05.462320 2017] [ssl:warn] [pid 12366] AH01909: serweb.mircopoint:8080:0 server certificate does NOT include an ID which matches the server name
    [Thu Oct 19 06:25:05.462490 2017] [ssl:error] [pid 12366] AH02217: ssl_stapling_init_cert: can't retrieve issuer certificate! [subject: emailAddress=[email protected],CN=MPOINT,OU=LSB,O=MIRCOPOINT,L=VERSILIA$
    [Thu Oct 19 06:25:05.462498 2017] [ssl:error] [pid 12366] AH02604: Unable to configure certificate serweb.mircopoint:8080:0 for stapling
    [Thu Oct 19 06:25:05.462645 2017] [mpm_prefork:notice] [pid 12366] AH00163: Apache/2.4.18 (Ubuntu) mod_fastcgi/mod_fastcgi-SNAP-0910052141 mod_fcgid/2.3.9 mod_python/3.3.1 Python/2.7.12 OpenSSL/1.0.2g configure$
    [Thu Oct 19 06:25:05.462657 2017] [core:notice] [pid 12366] AH00094: Command line: '/usr/sbin/apache2'
    [Thu Oct 19 06:25:05.466019 2017] [mpm_prefork:warn] [pid 12366] AH00167: long lost child came home! (pid 17187)
    [Thu Oct 19 07:35:16.163048 2017] [:error] [pid 27836] [client 191.189.56.135:60930] script '/var/www/html/getcfg.php' not found or unable to stat
    [Thu Oct 19 07:35:22.236343 2017] [:error] [pid 29287] [client 191.189.56.135:60959] script '/var/www/html/getcfg.php' not found or unable to stat
     
    Last edited: Oct 19, 2017

Share This Page