ISPConfig Webinterface 502

Discussion in 'Installation/Configuration' started by DripleX, Feb 4, 2024.

  1. DripleX

    DripleX New Member

    Today I added a new domain. In the configuration tab I saw a red input field on the php version.
    But I saved the config.
    After that, the other domains got the error 502.
    So I changed the setting from all domains on the php config to "dynamic".
    Then I can't get access to ispconfig3 Webinterface.
    I got only access, when I killed "php-fpm: master process (/etc/php/7.4/fpm/php-fpm.conf)" and start php5-fpm.
    But then all other domains got the 502 error.
    So I tried to update ispconfig3. It ended up successfully, but now I can't access Ispconfig3 anymore.
    Not with php7 or php5.
    Before I updated ispconfig I checked the php paths to php 7.4 and they were correct.

    Can you give me a hint what I can do?
    I tried the whole day to solve this issue, without success...

    nginx-error.log:
    Code:
    *398 connect() to unix:/var/lib/php7.4-fpm/ispconfig.sock failed (2: No such file or directory) while connecting to upstream, client: xxx.xxx.xxx.xxx, server: _, request: "GET / HTTP/1.1", upstream: "fastcgi://unix:/var/lib/php7.4-fpm/ispconfig.sock:", host: "domain.com:8080"
    htf_report:
    Code:
    ##### SERVER #####
    IP-address (as per hostname): ***.***.***.***
    [WARN] could not determine server's ip address by ifconfig
    [INFO] OS version is Debian GNU/Linux 11 (bullseye)
     
    [INFO] uptime:  16:50:41 up 21 min,  1 user,  load average: 0,00, 0,08, 0,08
     
    [INFO] memory:
                  gesamt       benutzt     frei      gemns.  Puffer/Cache verfügbar
    Speicher:      3,8Gi       1,7Gi       1,2Gi        13Mi       884Mi       1,9Gi
    Swap:          1,4Gi       241Mi       1,2Gi
     
    [INFO] ISPConfig is installed.
    
    ##### ISPCONFIG #####
    ISPConfig version is 3.2.9p1
    
    
    ##### VERSION CHECK #####
    
    [INFO] php (cli) version is 7.4.33
    [INFO] php-cgi (used for cgi php in default vhost!) is version 7.4.33
    
    ##### PORT CHECK #####
    
    
    ##### MAIL SERVER CHECK #####
    
    
    ##### RUNNING SERVER PROCESSES #####
    
    [INFO] I found the following web server(s):
        Unknown process (nginx:) (PID 2411)
    [INFO] I found the following mail server(s):
        Postfix (PID 1193)
    [INFO] I found the following pop3 server(s):
        Dovecot (PID 582)
    [INFO] I found the following imap server(s):
        Dovecot (PID 582)
    [INFO] I found the following ftp server(s):
        PureFTP (PID 933)
    
    ##### LISTENING PORTS #####
    Server)        ()
    Local        (Address)
    [anywhere]:445        (688/smbd)
    [anywhere]:993        (582/dovecot)
    [localhost]:9027        (2582/php-fpm:)
    [anywhere]:995        (582/dovecot)
    [localhost]:10023        (777/postgrey)
    [localhost]:10024        (701/amavisd-new)
    [localhost]:10025        (1193/master)
    [localhost]:10026        (701/amavisd-new)
    [localhost]:3306        (796/mariadbd)
    [localhost]:10027        (1193/master)
    [anywhere]:587        (1193/master)
    [anywhere]:139        (688/smbd)
    [localhost]:11211        (605/memcached)
    [localhost]:4526        (657/opendkim)
    [anywhere]:110        (582/dovecot)
    [localhost]:9039        (2582/php-fpm:)
    [anywhere]:143        (582/dovecot)
    [anywhere]:111        (1/init)
    [anywhere]:8080        (2411/nginx:)
    [anywhere]:80        (2411/nginx:)
    [anywhere]:10000        (1178/perl)
    [anywhere]:8081        (2411/nginx:)
    [anywhere]:465        (1193/master)
    [localhost]:9010        (2582/php-fpm:)
    [localhost]:9011        (2582/php-fpm:)
    [anywhere]:21        (933/pure-ftpd)
    ***.***.***.***:53        (606/named)
    ***.***.***.***:53        (606/named)
    [localhost]:53        (606/named)
    [localhost]:53        (606/named)
    [anywhere]:22        (825/sshd:)
    [anywhere]:25        (1193/master)
    [localhost]:953        (606/named)
    [anywhere]:443        (2411/nginx:)
    *:*:*:*::*:445        (688/smbd)
    *:*:*:*::*:993        (582/dovecot)
    *:*:*:*::*:995        (582/dovecot)
    *:*:*:*::*:10024        (701/amavisd-new)
    *:*:*:*::*:10026        (701/amavisd-new)
    *:*:*:*::*:587        (1193/master)
    [localhost]39        (688/smbd)
    [localhost]10        (582/dovecot)
    [localhost]43        (582/dovecot)
    [localhost]11        (1/init)
    *:*:*:*::*:80        (2411/nginx:)
    *:*:*:*::*:8081        (2411/nginx:)
    *:*:*:*::*:465        (1193/master)
    *:*:*:*::*:21        (933/pure-ftpd)
    *:*:*:*::*:53        (606/named)
    *:*:*:*::*:53        (606/named)
    *:*:*:*::*5054:9aff:fed0:53        (606/named)
    *:*:*:*::*5054:9aff:fed0:53        (606/named)
    *:*:*:*::*:22        (825/sshd:)
    *:*:*:*::*:25        (1193/master)
    *:*:*:*::*:953        (606/named)
    *:*:*:*::*:443        (2411/nginx:)
    
    
    
    
    ##### IPTABLES #####
    Chain INPUT (policy ACCEPT)
    target     prot opt source               destination         
    f2b-sshd   tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 22
    f2b-postfix-sasl  tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 25,465,587,143,993,110,995,465
    fail2ban-dovecot-pop3imap  tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 110,995,143,993
    fail2ban-NoProxy  tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 80,443
    fail2ban-BadBots  tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 80,443
    fail2ban-NoLoginFailures  tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 80,443
    fail2ban-NoAuthFailures  tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 80,443
    fail2ban-ip-blacklist  tcp  --  [anywhere]/0            [anywhere]/0           
    fail2ban-dovecot  tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 25,465,143,220,993,110,995
    fail2ban-sasl  tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 25,465,143,220,993,110,995
    fail2ban-pure-ftpd  tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 21,20,990,989
    fail2ban-ssh-ddos  tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 22
    fail2ban-ssh  tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 22
    DROP       tcp  -- !***.***.***.***/24       [anywhere]/0            tcp dpt:111
    DROP       tcp  -- !***.***.***.***/24       [anywhere]/0            tcp dpt:111
    ACCEPT     tcp  --  [localhost]            [anywhere]/0            tcp dpt:111
    DROP       udp  -- !***.***.***.***/24       [anywhere]/0            udp dpt:111
    
    Chain FORWARD (policy ACCEPT)
    target     prot opt source               destination         
    
    Chain OUTPUT (policy ACCEPT)
    target     prot opt source               destination         
    
    Chain f2b-postfix-sasl (1 references)
    target     prot opt source               destination         
    REJECT     all  --  ***.***.***.***        [anywhere]/0            reject-with icmp-port-unreachable
    RETURN     all  --  [anywhere]/0            [anywhere]/0           
    
    Chain f2b-sshd (1 references)
    target     prot opt source               destination         
    REJECT     all  --  ***.***.***.***        [anywhere]/0            reject-with icmp-port-unreachable
    REJECT     all  --  ***.***.***.***         [anywhere]/0            reject-with icmp-port-unreachable
    RETURN     all  --  [anywhere]/0            [anywhere]/0           
    
    Chain fail2ban-BadBots (1 references)
    target     prot opt source               destination         
    RETURN     all  --  [anywhere]/0            [anywhere]/0           
    
    Chain fail2ban-NoAuthFailures (1 references)
    target     prot opt source               destination         
    RETURN     all  --  [anywhere]/0            [anywhere]/0           
    
    Chain fail2ban-NoLoginFailures (1 references)
    target     prot opt source               destination         
    RETURN     all  --  [anywhere]/0            [anywhere]/0           
    
    Chain fail2ban-NoProxy (1 references)
    target     prot opt source               destination         
    RETURN     all  --  [anywhere]/0            [anywhere]/0           
    
    Chain fail2ban-dovecot (1 references)
    target     prot opt source               destination         
    RETURN     all  --  [anywhere]/0            [anywhere]/0           
    
    Chain fail2ban-dovecot-pop3imap (1 references)
    target     prot opt source               destination         
    RETURN     all  --  [anywhere]/0            [anywhere]/0           
    
    Chain fail2ban-ip-blacklist (1 references)
    target     prot opt source               destination         
    RETURN     all  --  [anywhere]/0            [anywhere]/0           
    
    Chain fail2ban-pure-ftpd (1 references)
    target     prot opt source               destination         
    RETURN     all  --  [anywhere]/0            [anywhere]/0           
    
    Chain fail2ban-sasl (1 references)
    target     prot opt source               destination         
    RETURN     all  --  [anywhere]/0            [anywhere]/0           
    
    Chain fail2ban-ssh (1 references)
    target     prot opt source               destination         
    DROP       all  --  ***.***.***.***        [anywhere]/0           
    RETURN     all  --  [anywhere]/0            [anywhere]/0           
    
    Chain fail2ban-ssh-ddos (1 references)
    target     prot opt source               destination         
    RETURN     all  --  [anywhere]/0            [anywhere]/0           
    
    
    
    
    ##### LET'S ENCRYPT #####
    Certbot is installed in /usr/bin/certbot
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Somehow ISPConfig on your systmem still seems to use PHP 5.6, but it should be PHP 7.4 on Debian 11 and maybe there is even a duplicate config file on one of the pool directories. First, check if there is a duplicate pool file in php 5.6 and 7.4 pool dir. the one for PHP 7.4 is /etc/php/7.4/fpm/pool.d/ and the one for PHP 5.6 is either /etc/php/5.6/fpm/pool.d/ or /etc/php5/fpm/pool.d/
    If you do not find any duplicates, move the ispconfig.conf pool file from the php 5.6 pool dir to the php 7.4 pool dir and restart php 5.6 and 7.4 fpm (php 5.6 first).

    your system doe snot seem to be a atsnadrd setup anyway as you have things running that are not related to ISPConfig setups like opendkim or samba.
     
    ahrasis and DripleX like this.
  3. DripleX

    DripleX New Member

    Thank you Till for your fast help!
    That solved the issue with ispconfig3.

    Before I solved this, I had another problem, that php5 doesn't start if php7 was running and vise versa.
    A sock file was there which listened to a port which the other php version wanted to connect.
    So I removed the sock file and restarted both php versions.
    Then all sites are running again.

    But I really don't know how I got into this situation, only creating one new website.

    EDIT:
    I think I have an additional issue:
    If I change the php version of one site, the webxx.conf gets not updated.
    It get removed and not created anymore.
     
    Last edited: Feb 4, 2024
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    It should get removed in the pool folder of the old version and added in the pool folder of the new version. If this does not happens, double-check the settings of your additional PHP versions, maybe one of the pool folder paths is wrong. You can also use debug mode in ISPConfig to see in details what ISPConfig is doing to change the configuration.
     
    ahrasis and Th0m like this.
  5. DripleX

    DripleX New Member

    Yes you're right, the PHP-FPM paths were wrong.
    I added manually php5.6 to the additonal PHP versions, because one site need this, but the paths were different to howtoforge thread.
    Now all is working again.
    Thank you again for your fast help Till!
     
    ahrasis likes this.

Share This Page