ISPConfig Buster

I have upgraded my debian server from Stretch to Buster. Upon doing so I ISP Config ceased working. I have uninstalled and reinstalled all the dependant applications yet I get the following when installing the php script which is odd as I have installed them many times over including their configurations.

[INFO] service Apache not detected
[INFO] service nginx not detected
[INFO] service Postgrey not detected
[INFO] service Postfix not detected
[ERROR] Postfix not installed - skipping Mail
[INFO] service Jailkit not detected
[INFO] service pureftpd not detected
[INFO] service BIND not detected
[INFO] service MyDNS not detected
[INFO] service OpenVZ not detected
[INFO] service Ubuntu Firewall not detected
[INFO] service Bastille Firewall not detected
[INFO] service Metronome XMPP Server not detected
Configuring Fail2ban
Installing ISPConfig

 

Had absolutely no idea of su - !
Anyway I did that and installation went through but ISPconfig is inaccessible and browser directs page to the Apache 2 Debian Default Page.

 

i have update debian stretch to buster on sistem multiserver...all ok, bat on mail server run php -q update.php anche see this error:

Configuring Postfix
Configuring Dovecot
Creating new DHParams file, this takes several minutes. Do not interrupt the script.
142+0 record dentro
142+0 record fuori
142 bytes copied, 0,000295352 s, 481 kB/s
unable to load DH parameters
140294286128256:error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong tag:../crypto/asn1/tasn_dec.c:1130:
140294286128256:error:0D07803A:asn1 encoding routines:asn1_item_embed_d2i:nested asn1 error:../crypto/asn1/tasn_dec.c:290:Type=DHparams
Configuring Mailman
Configuring Spamassassin
Configuring Amavisd
Configuring Getmail
Configuring Ubuntu Firewall
Configuring Database
Updating ISPConfig

webmail is ok, thunderbird no!

 

perfect!
Thanks

 

I think this dhparams file is for pure-ftpd-mysql, which if it is already created, you could use via symlink or directly for other services like for dovecot and web. There is no necessity to create one dhparams file for each services.

 

I see this error mail...

root@srv:log # tail -f mail.err
Sep 13 01:53:20 srv dovecot: auth: Error: auth worker: Aborted PASSV request for [email protected]: Internal auth worker failure
Sep 13 01:53:20 srv dovecot: auth-worker(781): Error: sql(cc@domain,185.30.xxx.xxx,<kx+a12OStIG5HrGh>): Password query failed: Not connected to database
Sep 13 01:53:20 srv dovecot: auth-worker(782): Error: mysql(localhost): Connect failed to database (dbispconfig): Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2) - waiting for 1 seconds before retry

i check /etc/dovecot/dovecot-sql.conf, user and password ok.
because error?

 

Yes, not related with dhparms.
No, i not disabled network in mariadb, from update i keep config mariadb server.

Yes, connect!
I don't understand the error

 

Still unable to have a working machine given that I get errors from apache mysql etc. Is there any way I can start from scratch without going through my inherently complex debian reinstallation. As a reminder I have upgraded from stretch to my current buster system without using su instead of su -.

 

Given that I want to work with ssl and tls ports on my emaill server i have obtained the SSL certificates and adapted postfix and dovecot accordingly using this methodology https://www.server-world.info/en/note?os=Debian_10&p=mail&f=6, instead of going through ISPConfig even though it is fully installed. Would it be possible to maintain both systems in parallel? if not how can I use port 993 and 587 using ISPConfig alone?

 

Actually you don't have to as for ISPConfig server you can simply follow this tutorial: https://www.howtoforge.com/tutorial...with-a-free-lets-encrypt-ssl-certificate/amp/

If nothing goes wrong, in 3.1.16 we will have this automated.

 

Thanks Ahrasis. Should I reinstall postfix and dovecot then, with deletion of their configurations, or should I just update ispconfig which will override their conflicting configurations automatically?

 

yes it works. Only Roundcube is giving me smtp errors 250.

 

By way of background this setup is being used primarily for a law firm's email server. For any law firm, security and privacy is paramount to anything else not because we have anything to hide but because client information is always very sensitive and may have major financial impact. So for us, functionality and features are a long distant second to security, privacy and resilience ie high availability. Thus we cannot opt for a service like google or ms365 for simply lack of trust.

 

On a clean install, we want to you secure ssl linked mail using ports 993 and 587 but the standard installation only allows 110 and 25 ports connections. Is there any way to force postfix and dovecot to listen to these ports using the ssl certificates of ispconfig? I prefer not to overcomplicate and use certbot which is difficult to set up.