ISPConfig update fails with “Access denied for user 'root'@'::1'” [SOLVED]

Discussion in 'Installation/Configuration' started by Juri Salminen, Nov 4, 2025.

  1. Juri Salminen

    Juri Salminen New Member

    Hi,
    I’m trying to update my single-server installation from ISPConfig 3.3.0p2 to 3.3.0p3 on Debian 12 (Bookworm) using the ispconfig_update.sh script and selecting the stable version.
    Everything looks fine until it reaches the database check, where it fails:
    Code:
    Checking MariaDB version 10.11.14 .. OK
Checking ISPConfig database .. mysqlcheck: Got error: 1045: Access denied for user 'root'@'::1' (using password: YES) when trying to connect
OK
ERROR 1045 (28000): Access denied for user 'root'@'::1' (using password: YES)
Unable to call mysql command line with credentials from mysql_clientdb.conf
    I've confirmed that the password in /usr/local/ispconfig/server/lib/mysql_clientdb.conf is correct. I can log in manually using mysql -u root -p.

    My /etc/hosts contains the following:
    Code:
    127.0.0.1       localhost
127.0.1.1       dev.exempel.se        dev

# The following lines are desirable for IPv6 capable hosts
::1     localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
    The report:
    Code:
    ##### SERVER #####
IP-address (as per hostname): ***.***.***.***
[WARN] could not determine server's ip address by ifconfig
[INFO] OS version is Debian GNU/Linux 12 (bookworm)

[INFO] uptime:  09:08:42 up 18 days, 50 min,  1 user,  load average: 0.00, 0.01, 0.00

[INFO] memory:
               total        used        free      shared  buff/cache   available
Mem:           7.8Gi       3.1Gi       277Mi       158Mi       4.9Gi       4.6Gi
Swap:          974Mi       784Mi       190Mi

[INFO] systemd failed services status:
  UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.

[INFO] ISPConfig is installed.

##### ISPCONFIG #####
ISPConfig version is 3.3.0p2


##### VERSION CHECK #####

[INFO] php (cli) version is 8.2.29
[INFO] php-cgi (used for cgi php in default vhost!) is version 8.2.29

##### PORT CHECK #####


##### MAIL SERVER CHECK #####

[WARN] I found no "smtps" entry in your postfix master.cf
[INFO] this is not critical, but if you want to offer SSL for smtp (not TLS) connections you have to enable this.

##### RUNNING SERVER PROCESSES #####

[INFO] I found the following web server(s):
        Apache 2 (PID 914089)
[INFO] I found the following mail server(s):
        Postfix (PID 1372)
[INFO] I found the following pop3 server(s):
        Dovecot (PID 612)
[INFO] I found the following imap server(s):
        Dovecot (PID 612)
[INFO] I found the following ftp server(s):
        PureFTP (PID 1163)

##### LISTENING PORTS #####
(only           ()
Local           (Address)
[localhost]:6379                (637/redis-server)
***.***.***.***:53              (2352405/named)
***.***.***.***:53              (2352405/named)
***.***.***.***:53              (2352405/named)
***.***.***.***:53              (2352405/named)
[anywhere]:3306         (3844/mariadbd)
[localhost]:11211               (617/memcached)
[localhost]:11332               (681/rspamd:)
[localhost]:11333               (681/rspamd:)
[localhost]:11334               (681/rspamd:)
[localhost]:53          (2352405/named)
[localhost]:53          (2352405/named)
[localhost]:53          (2352405/named)
[localhost]:53          (2352405/named)
[localhost]:953         (2352405/named)
[localhost]:953         (2352405/named)
[localhost]:953         (2352405/named)
[localhost]:953         (2352405/named)
[anywhere]:465          (1372/master)
[anywhere]:22           (663/sshd:)
[anywhere]:21           (1163/pure-ftpd)
[anywhere]:25           (1372/master)
[anywhere]:110          (612/dovecot)
[anywhere]:4190         (612/dovecot)
[anywhere]:143          (612/dovecot)
[anywhere]:995          (612/dovecot)
[anywhere]:993          (612/dovecot)
[localhost]:10023               (634/postgrey)
[anywhere]:587          (1372/master)
*:*:*:*::*:953          (2352405/named)
*:*:*:*::*:953          (2352405/named)
*:*:*:*::*:953          (2352405/named)
*:*:*:*::*:953          (2352405/named)
*:*:*:*::*:3306         (3844/mariadbd)
*:*:*:*::*:8081         (914089/apache2)
*:*:*:*::*:8080         (914089/apache2)
*:*:*:*::*:53           (2352405/named)
*:*:*:*::*:53           (2352405/named)
*:*:*:*::*:53           (2352405/named)
*:*:*:*::*:53           (2352405/named)
*:*:*:*::*:10023                (634/postgrey)
*:*:*:*::*be24:11ff:fe88:53             (2352405/named)
*:*:*:*::*be24:11ff:fe88:53             (2352405/named)
*:*:*:*::*be24:11ff:fe88:53             (2352405/named)
*:*:*:*::*be24:11ff:fe88:53             (2352405/named)
*:*:*:*::*:6379         (637/redis-server)
*:*:*:*::*:443          (914089/apache2)
*:*:*:*::*:465          (1372/master)
*:*:*:*::*:22           (663/sshd:)
*:*:*:*::*:21           (1163/pure-ftpd)
*:*:*:*::*:25           (1372/master)
[localhost]10           (612/dovecot)
*:*:*:*::*:80           (914089/apache2)
*:*:*:*::*:4190         (612/dovecot)
[localhost]43           (612/dovecot)
*:*:*:*::*:995          (612/dovecot)
*:*:*:*::*:993          (612/dovecot)
*:*:*:*::*:11332                (681/rspamd:)
*:*:*:*::*:11333                (681/rspamd:)
*:*:*:*::*:11334                (681/rspamd:)
*:*:*:*::*:587          (1372/master)




##### IPTABLES #####
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
f2b-pure-ftpd  6    --  [anywhere]/0            [anywhere]/0            multiport dports 21
f2b-sshd   6    --  [anywhere]/0            [anywhere]/0            multiport dports 22

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain f2b-pure-ftpd (1 references)
target     prot opt source               destination
RETURN     0    --  [anywhere]/0            [anywhere]/0

Chain f2b-sshd (1 references)
target     prot opt source               destination
REJECT     0    --  ***.***.***.***        [anywhere]/0            reject-with icmp-port-unreachable
REJECT     0    --  ***.***.***.***       [anywhere]/0            reject-with icmp-port-unreachable
REJECT     0    --  ***.***.***.***        [anywhere]/0            reject-with icmp-port-unreachable
REJECT     0    --  ***.***.***.***        [anywhere]/0            reject-with icmp-port-unreachable
REJECT     0    --  ***.***.***.***        [anywhere]/0            reject-with icmp-port-unreachable
RETURN     0    --  [anywhere]/0            [anywhere]/0




##### LET'S ENCRYPT #####
acme.sh is installed in /root/.acme.sh/acme.sh
    I'm clueless on what to do, hence this post :)
    Thanks in advance!
     
    Juri Salminen, Nov 4, 2025
    #1
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    You must test it with:

    mysql -h localhost -u root -p

    and

    mysql -h 127.0.0.1 -u root -p

    Both must work. You might also try IPv6 address to see if it works, MySQL has different root users for the different connection methods. Localhost is socket while 127.0.0.1 is network.
     
    till, Nov 4, 2025
    #2
  3. Juri Salminen

    Juri Salminen New Member

    Thanks for replying:)

    mysql -h 127.0.0.1 -u root -p fails using the same password and I guess ispconfig_update.sh connects using that approach. But why? And how do I fix the problem?
     
    Juri Salminen, Nov 4, 2025
    #3
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Set the correct password in mysql for hostname 127.0.0.1, e.g., using phpmyadmin. Or you may have disabled networking in MySQL config files (skip-networking config option).
     
    till, Nov 4, 2025
    #4
  5. Juri Salminen

    Juri Salminen New Member

    I had disabled bind-address in my MySQL config. Enabling bind-address = 127.0.0.1 solved the problem.
    Thank you!
     
    Last edited: Nov 4, 2025
    Juri Salminen, Nov 4, 2025
    #5
    ahrasis and till like this.

Share This Page