[SOLVED]ISPConfig Cluster : Can't reach web interface on slave

Hello there, I followed this tutorial :
https://www.howtoforge.com/tutorial...abase-cluster-on-debian-8.4-with-ispconfig-3/
It seems that I can't reach the web interface on 8080 on the slave server (master is available).

Here is what I got with the ISPConfig test script :

The master is in attachment.

Here is the Slave :

Code:

##### SERVER #####
IP-address (as per hostname): [localhost]
IP-address(es) (as per ifconfig): [localhost], ***.***.***.***
[INFO] ISPConfig is installed.
##### ISPCONFIG #####
ISPConfig version is 3.1dev
##### VERSION CHECK #####
[INFO] php (cli) version is 5.6.30-0+deb8u1
[INFO] php-cgi (used for cgi php in default vhost!) is version 5.6.30-0+deb8u1
##### PORT CHECK #####
[WARN] Port 8080 (ISPConfig) seems NOT to be listening
[WARN] Port 21 (FTP server) seems NOT to be listening
##### MAIL SERVER CHECK #####
##### RUNNING SERVER PROCESSES #####

[INFO] I found the following web server(s):
    Apache 2 (PID 1003)
[INFO] I found the following mail server(s):
    Postfix (PID 1391)
[INFO] I found the following pop3 server(s):
    Dovecot (PID 4959)
[INFO] I found the following imap server(s):
    Unknown process (init) (PID 1)
[WARN] I could not determine which ftp server is running.

##### LISTENING PORTS #####
(seulement        ()
Adresse        (distante)
***.***.***.***:53        (587/named)
***.***.***.***:53        (587/named)
[localhost]:53        (587/named)
[anywhere]:22        (584/sshd)
[anywhere]:25        (1391/master)
[localhost]:953        (587/named)
[anywhere]:993        (1/init)
[anywhere]:43426        (562/rpc.statd)
[anywhere]:995        (4959/dovecot)
[anywhere]:4711        (4959/dovecot)
[localhost]:10023        (686/postgrey.pid)
[localhost]:10024        (1118/amavisd-new)
[localhost]:10025        (1391/master)
[localhost]:10026        (1118/amavisd-new)
[localhost]:10027        (1391/master)
[anywhere]:587        (1391/master)
[localhost]:11211        (583/memcached)
[anywhere]:110        (4959/dovecot)
[anywhere]:143        (1/init)
[anywhere]:111        (550/rpcbind)
[anywhere]:10000        (1030/perl)
[anywhere]:465        (1391/master)
*:*:*:*::*:53        (587/named)
*:*:*:*::*:22        (584/sshd)
*:*:*:*::*:25        (1391/master)
*:*:*:*::*:953        (587/named)
*:*:*:*::*:443        (1003/apache2)
*:*:*:*::*:993        (1/init)
*:*:*:*::*:995        (4959/dovecot)
*:*:*:*::*:47939        (562/rpc.statd)
*:*:*:*::*:4711        (4959/dovecot)
*:*:*:*::*:10023        (686/postgrey.pid)
*:*:*:*::*:10024        (1118/amavisd-new)
*:*:*:*::*:10026        (1118/amavisd-new)
*:*:*:*::*:3306        (882/mysqld)
*:*:*:*::*:587        (1391/master)
[localhost]10        (4959/dovecot)
[localhost]43        (1/init)
[localhost]11        (550/rpcbind)
[localhost]0000        (1030/perl)
*:*:*:*::*:80        (1003/apache2)
*:*:*:*::*:465        (1391/master)
*:*:*:*::*:8081        (1003/apache2)
##### IPTABLES #####
Chain INPUT (policy DROP)
target     prot opt source               destination     
ACCEPT     all  --  [anywhere]/0            [anywhere]/0            state RELATED,ESTABLISHED
ACCEPT     all  --  [anywhere]/0            [anywhere]/0       
ACCEPT     icmp --  [anywhere]/0            [anywhere]/0       
ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:22
ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:53
ACCEPT     udp  --  [anywhere]/0            [anywhere]/0            udp dpt:53
ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:80
ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:443
ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:8080
ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:25
ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:3306
ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:4711
ACCEPT     udp  --  [anywhere]/0            [anywhere]/0            udp dpt:64194

Chain FORWARD (policy DROP)
target     prot opt source               destination     
ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp flags:0x17/0x02 limit: avg 1/sec burst 5
ACCEPT     udp  --  [anywhere]/0            [anywhere]/0            limit: avg 1/sec burst 5
ACCEPT     icmp --  [anywhere]/0            [anywhere]/0            icmptype 8 limit: avg 1/sec burst 5
ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp flags:0x17/0x04 limit: avg 1/sec burst 5

Chain OUTPUT (policy DROP)
target     prot opt source               destination     
ACCEPT     all  --  [anywhere]/0            [anywhere]/0            state RELATED,ESTABLISHED
ACCEPT     all  --  [anywhere]/0            [anywhere]/0       
ACCEPT     icmp --  [anywhere]/0            [anywhere]/0       
ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:22
ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:53
ACCEPT     udp  --  [anywhere]/0            [anywhere]/0            udp dpt:53
ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:80
ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:443
ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:8080
ACCEPT     udp  --  [anywhere]/0            [anywhere]/0            udp dpt:123
ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:25
ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:3306
ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:4711
ACCEPT     udp  --  [anywhere]/0            [anywhere]/0            udp dpt:64194

This is what I got from the /var/log/apache2/error.log :

Code:

tail /var/log/apache2/error.log
[ 2017-05-15 15:11:42.4407 1012/7f09b0940740 agents/HelperAgent/Main.cpp:650 ]: PassengerHelperAgent online, listening at unix:/tmp/passenger.1.0.1003/generation-0/request
[ 2017-05-15 15:11:42.4970 1017/7f25dcf8e780 agents/LoggingAgent/Main.cpp:321 ]: PassengerLoggingAgent online, listening at unix:/tmp/passenger.1.0.1003/generation-0/logging
[ 2017-05-15 15:11:42.4972 1009/7fca27ab3740 agents/Watchdog/Main.cpp:728 ]: All Phusion Passenger agents started!
[Mon May 15 15:11:44.148618 2017] [:error] [pid 1003] python_init: Python version mismatch, expected '2.7.5+', found '2.7.9'.
[Mon May 15 15:11:44.170810 2017] [:error] [pid 1003] python_init: Python executable found '/usr/bin/python'.
[Mon May 15 15:11:44.170845 2017] [:error] [pid 1003] python_init: Python path being used '/usr/lib/python2.7/:/usr/lib/python2.7/plat-x86_64-linux-gnu:/usr/lib/python2.7/lib-tk:/usr/lib/python2.7/lib-old:/usr/lib/python2.7/lib-dynload'.
[Mon May 15 15:11:44.170895 2017] [:notice] [pid 1003] mod_python: Creating 8 session mutexes based on 150 max processes and 0 max threads.
[Mon May 15 15:11:44.170901 2017] [:notice] [pid 1003] mod_python: using mutex_directory /tmp
[Mon May 15 15:11:44.253880 2017] [mpm_prefork:notice] [pid 1003] AH00163: Apache/2.4.10 (Debian) mod_fastcgi/mod_fastcgi-SNAP-0910052141 mod_fcgid/2.3.9 Phusion_Passenger/4.0.53 mod_python/3.3.1 Python/2.7.9 OpenSSL/1.0.1t configured -- resuming normal operations
[Mon May 15 15:11:44.253930 2017] [core:notice] [pid 1003] AH00094: Command line: '/usr/sbin/apache2'

I saw some troubles, the ISPConfig Master/Slave are not in the exact same version, and the test script clearly show that my slave dont have the 8080 listening. But why?

 

I tried to update both serveur, now on 3.1.3, but problem not fixed.

 

Got an update.
I found out that my ISPConfig-Slave did not have the ispconfig.vhost (in /etc/apache2/sites-available/ & enabled). I copied it manually from the ISPConfig-Master. After an apache2 restart, I have a :

Code:

SSLCertificateFile: file '/usr/local/ispconfig/interface/ssl/ispserver.crt' does not exist or is empty

And indeed, there is not SSL files in this folder (therefore, theses files are present on Master).
I commented out the lines in the ispconfig.vhost, and it works, but i don't have SSL on slave, obviously.

Sooo... Can anybody help me out to figure where the error is from ? Did I missed something on the install or what ?

 

Oops, there is something more, I can't login on the ISPConfig-Slave with my ISPConfig-Master authentification... wrong credentials...

 

I modified the admin password in the database.
I started a test, create a new client on master, synchronize all, and check if the client exist on the slave.

Client doesn't exist.

There is something awfully wrong with my setup, and I can't figure why.

 

I got 0 errors with the part Enable the debug Loglevel in ISPConfig
But when it comes to Run the server script manually to get detailed debug output
This is what I got :

Code:

PHP Warning:  mysqli_connect(): (28000/1045): Access denied for user 'ispcsrv3'@'ISPConfig-Slave' (using password: YES) in /usr/local/ispconfig/server/lib/classes/db_mysql.inc.php on line 79
PHP Warning:  mysqli_connect(): (28000/1045): Access denied for user 'ispcsrv3'@'ISPConfig-Slave' (using password: YES) in /usr/local/ispconfig/server/lib/classes/db_mysql.inc.php on line 85

Where do this user came from ?
The ispcrv3@'ISPConfig-Slave' exist on both server, and the md5 password hash is identical.

 

I somehow found the password of ispcsrv3, and I tried to connect to the Master from the slave manually using theses credentials but without success.

Then I removed the old ispcsrv3 users in slave and in master.
I created a 'ispcsrv3'@'%' and 'ispcsrv3'@'ISPConfig-Slave' with the password I got from /usr/local/ispconfig/interface/lib/config.inc.php on the master, with all rights on all dbispconfig, on the slave (and were automatically created on the master!?).

I tried to connect to mysql manually using ispcsrv3 on slave to master, it works.

But I have still the same error (Run the server script manually to get detailed debug output)

Code:

PHP Warning: mysqli_connect(): (28000/1045): Access denied for user 'ispcsrv3'@'ISPConfig-Slave' (using password: YES) in /usr/local/ispconfig/server/lib/classes/db_mysql.inc.php on line 87
PHP Warning: mysqli_connect(): (28000/1045): Access denied for user 'ispcsrv3'@'ISPConfig-Slave'

 

I managed to found that the password I used for the new ispcsrv3 sql account was not the one used by ISPConfig.

Then I found out that the wrong password was in /usr/local/ispconfig/server/lib/config.inc.php, I just changed it to the one I found in /usr/local/ispconfig/interface/lib/config.inc.php from the Master, and there It goes, working !

But I still don't know there this issue is from.