CentOS6 Upgrade

Started by Administrator, March 14, 2017, 08:24:48 PM

Previous topic - Next topic

sal

thank you for the information, is it reported elsewhere what are the security issues?
The problems i have encountered after the upgrade are mostly related to messed up server configuration, messed up firewall, messed up apache configuration, messed up mail server, so it requires big time updating on a production server and trying to restore configuration.
Possibly if i'll keep using cwp, i'll install the new version on a fresh server and will import the cwp users and web sites on it, this is at the moment the most safe procedure i can think of.
About the warning message inside the control panel, i have seen it, this is another thing that looked a bit unprofessional, because it is visible by all users and it never stated that the panel will be unavailable soon, sorry but this is not a good behavior in my opinion.
I don't have updated because there is not a working script and the manual procedure doesn't work right.
If the security issues are serious and update doesn't work, then i'll have to switch to a different panel.

Quote from: Administrator on February 22, 2018, 02:44:56 PM
you have the notification in cwp.admin in "red alert" box more than a few months now.

You need to do this upgrade as version 0.9.8.15x is very old and has security issues which were fixed a long time ago.
Also, each cwp version has expire date so you can't run it forever as it will be unusable soon and then you will have an error and no notification about upgrade needed.

Administrator

you should check the upgrade scripts, this is a big upgrade and this can go wrong as in the new version and all new software is installed and you could have issues with website down if this would be automated, taking all that into consideration the best and securest way is to do update manually when you have a free time to do that and deal with possible issues.

As said before notification about security issues and urgent upgrade requirement is more than a few months "flashing RED" as a critical issue in your cwp admin panel at the top.

As mentioned in the upgrade message of your cwp we are here to help to get to latest upgrade and to have your server more secure.
Security and stability will be our main focus and soon we will be releasing many new upgrades and security tools.

Clients with the latest versions have probably noticed that we are relasing a few new versions per day as we are making many new integration changes.


aleks

Hello, I updated my MySQL, CWP and Apache. Now my site work, but I can't login in the cwp control panel. When I try to do it I see this:

Warning: main(../../resources/admin/include/db_conn.php): failed to open stream: No such file or directory in /usr/local/cwpsrv/htdocs/admin/admin/index.php on line 0

Warning: main(../../resources/admin/include/db_conn.php): failed to open stream: No such file or directory in /usr/local/cwpsrv/htdocs/admin/admin/index.php on line 0

Warning: main(): Failed opening '../../resources/admin/include/db_conn.php' for inclusion (include_path='.:/usr/local/cwp/php71/lib/php') in /usr/local/cwpsrv/htdocs/admin/admin/index.php on line 0

Warning: main(../../resources/admin/include/postfix.php): failed to open stream: No such file or directory in /usr/local/cwpsrv/htdocs/admin/admin/index.php on line 0

Warning: main(../../resources/admin/include/postfix.php): failed to open stream: No such file or directory in /usr/local/cwpsrv/htdocs/admin/admin/index.php on line 0

Warning: main(): Failed opening '../../resources/admin/include/postfix.php' for inclusion (include_path='.:/usr/local/cwp/php71/lib/php') in /usr/local/cwpsrv/htdocs/admin/admin/index.php on line 0

Notice: Undefined variable: db_host_postfix in /usr/local/cwpsrv/htdocs/admin/admin/index.php on line 0

Notice: Undefined variable: db_user_postfix in /usr/local/cwpsrv/htdocs/admin/admin/index.php on line 0

Notice: Undefined variable: db_pass_postfix in /usr/local/cwpsrv/htdocs/admin/admin/index.php on line 0

Notice: Undefined variable: db_name_postfix in /usr/local/cwpsrv/htdocs/admin/admin/index.php on line 0

Warning: [obfuscated](): (HY000/1045): Access denied for user ''@'localhost' (using password: NO) in /usr/local/cwpsrv/htdocs/admin/admin/index.php on line 0

Notice: Undefined variable: db_host in /usr/local/cwpsrv/htdocs/admin/admin/index.php on line 0

Notice: Undefined variable: db_user in /usr/local/cwpsrv/htdocs/admin/admin/index.php on line 0

Notice: Undefined variable: db_pass in /usr/local/cwpsrv/htdocs/admin/admin/index.php on line 0

Notice: Undefined variable: db_name in /usr/local/cwpsrv/htdocs/admin/admin/index.php on line 0

Warning: [obfuscated](): (HY000/1045): Access denied for user ''@'localhost' (using password: NO) in /usr/local/cwpsrv/htdocs/admin/admin/index.php on line 0
**Check your MySQL root password in: /usr/local/cwpsrv/htdocs/resources/admin/include/db_conn.php and /root/.my.cnf


Warning: [obfuscated]() expects exactly 1 parameter, 0 given in /usr/local/cwpsrv/htdocs/admin/admin/index.php on line 0
Could not connect:

What I have to do?

sal

ok thank you,
it's not a problem for me doing the upgrade manually, but i can't find a place with step by step instructions on how to do it.
I can open the .sh script to see what the script will do, but it should be much better if you will put some clear guide(or please point me to it if it already exists).
Main issues are

  • missing ssl configuration(can,t login to cwp with previous ssl settings too)
  • missing apache, php,, nginx and whatever related configuration
i don't see any solution other than switch to another panel and also i'm not suggesting cwp because of this.

Quote from: Administrator on February 23, 2018, 08:44:41 PM
you should check the upgrade scripts, this is a big upgrade and this can go wrong as in the new version and all new software is installed and you could have issues with website down if this would be automated, taking all that into consideration the best and securest way is to do update manually when you have a free time to do that and deal with possible issues.

As said before notification about security issues and urgent upgrade requirement is more than a few months "flashing RED" as a critical issue in your cwp admin panel at the top.

As mentioned in the upgrade message of your cwp we are here to help to get to latest upgrade and to have your server more secure.
Security and stability will be our main focus and soon we will be releasing many new upgrades and security tools.

Clients with the latest versions have probably noticed that we are relasing a few new versions per day as we are making many new integration changes.

vj1991

I've disabled root access from sshd_config (PermitRootLogin no), i can't access to the CWP and cant enable root access. I cant update without root user. Can anyone help?

bullten

take your server in rescue mode and enable ssh access.

HumbertoKF

Hi Everybody,

Since I started using CWP I always upgrade MySQL Server following these steps: https://blog.bullten.com/upgrading-mysql-to-5-5-in-centos-web-panel-cwp/

My first upgrade failed when executing Apache Upgrade script, so I'm executing only CWP Upgrade script to gain access to CWP again.

For anyone that faced this issue with webmail


DATABASE ERROR: CONNECTION FAILED!
Unable to connect to the database!
Please contact your server-administrator.


You need to copy roundcube database user password from

cat /usr/local/cwpsrv/var/services/roundcube/config/config.inc.php

to

nano /usr/local/apache/htdocs/roundcube/config/db.inc.php

or

nano /usr/local/apache/htdocs/roundcube/config/config.inc.php

Regards,

Okta

Hi..., after update CWP My Apache Webserver not running, "httpd is stopped".

I have message error :
Stopping httpd: [FAILED]
Starting httpd: httpd: Syntax error on line 3 of /usr/local/apache/conf/httpd.conf: Syntax error on line 2 of /usr/local/apache/conf.d/h264_flvx.conf: Cannot load /usr/local/apache/modules/mod_h264_streaming.so into server: /usr/local/apache/modules/mod_h264_streaming.so: undefined symbol: ap_log_rerror
[FAILED]

Application Version:
Apache version: Apache/2.4.29
PHP version: 5.4.27
MySQL version: 5.5.59
System info:
Distro Name: CentOS release 6.7 (Final)
Kernel Version: 2.6.32-504.el6.x86_64
Centos Web Panel:
CWP version: 0.9.8.374

I am stuck, please help me.

mouchoon

#188
i am restore to old cwp for errors with "sh cwpsrv.sh restore "

but now i can,t upgrade cwp again & get "CWP does not require this update"
1- how to skip checking or solve any way?

2-after upgrade and solve many errors my sites shown 500 internal server error & in eror logs get this :" /home/mysite/public_html/.htaccess: Invalid command 'IndexIgnore', perhaps misspelled or defined by a module not included in the server configuration "
What a solution?

Administrator

Quote from: mouchoon on March 20, 2018, 11:30:49 AM
i am restore to old cwp for errors with "sh cwpsrv.sh restore "

but now i can,t upgrade cwp again & get "CWP does not require this update"
1- how to skip checking or solve any way?

2-after upgrade and solve many errors my sites shown 500 internal server error & in eror logs get this :" /home/mysite/public_html/.htaccess: Invalid command 'IndexIgnore', perhaps misspelled or defined by a module not included in the server configuration "
What a solution?

solution remove cwpsrv rpm
yum remove cwpsrv
for htaccess issue you need to check that file

Quote from: Okta on March 16, 2018, 07:57:43 AM
Stopping httpd: [FAILED]
Starting httpd: httpd: Syntax error on line 3 of /usr/local/apache/conf/httpd.conf: Syntax error on line 2 of /usr/local/apache/conf.d/h264_flvx.conf: Cannot load /usr/local/apache/modules/mod_h264_streaming.so into server: /usr/local/apache/modules/mod_h264_streaming.so: undefined symbol: ap_log_rerror
[FAILED]

solution simple delete that file
rm -f /usr/local/apache/conf.d/h264_flvx.conf

mouchoon

Quote from: Administrator on March 20, 2018, 12:42:59 PM
solution remove cwpsrv rpm
yum remove cwpsrv
Will it keep my data & users on cwp?

Administrator

this only removes cwpsrv, or you can also remove that check from the script you are running.

emilyvthomas

can anyone help me,, urgent?
after trying to upgrade apache, its showed failed, so i try to restore, now website showing internal server error.

nmo0ory

hello,
so i was having a server
and i was having httpd and mysql
then i install cwp
but after that i got problem my httpd won't start
give me the error
Starting httpd: /usr/local/apache/bin/httpd: symbol lookup error: /usr/lib64/libapr-1.so.0: undefined symbol: dlopen
                                                           [FAILED]


what can i do to fix it ?

Luca2186

#194
After following upgrade instructions I have the following php warnings at the bottom of left column of cwp admin panel under 'User Connected':

Warning: mysqli::__construct(): (HY000/1049): Unknown database 'oauthv2' in /usr/local/cwpsrv/htdocs/resources/admin/include/functions.php on line 0

Notice: Trying to get property of non-object in /usr/local/cwpsrv/htdocs/resources/admin/include/functions.php on line 0

How to fix these? I have no database called oauthv2, and the file functions.php is ioncube encrypted