Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
1
PHP / Re: None PHP7+ installation was found!
« on: March 24, 2023, 03:35:17 PM »
If you are trying to install this application from the command line, you must use the absolute path to your php-fpm install, something like:
Code: [Select]
/opt/alt/php-fpm74/usr/bin/php <your command here>
2
Installation / Re: php per domain
« on: March 21, 2023, 01:20:32 AM »
From the Dashboard, select WebServer Settings > WebServers Domain Conf , Select the user name from the pull down menu and then either the main domain or subdomain tabs.
From the user cPanel, go to CWP Settings > Php Selector
From the user cPanel, go to CWP Settings > Php Selector
3
Installation / Re: New Installation and Problems
« on: March 20, 2023, 04:48:00 PM »
Just a couple of points for you to verify. after you add a domain or subdomain, you have to make sure of a few things.
First, give it time for the new domain to propagate, a quick test is to us nslookup <domain.tld> from a Linux command line, if it returns the IP of your server, you are ready to go.
Second, once the domain is pointing to your server, enable SSL on the site. From user cpanel.domain.tld > Domains > AutoSSL, select the domain from the dropdown and click Install.
Third, in cpanel.domain.tld, go to CWP Settings > Php Selector and choose from the dropdown menu your domain, then select your PHP version and click Update Version.
First, give it time for the new domain to propagate, a quick test is to us nslookup <domain.tld> from a Linux command line, if it returns the IP of your server, you are ready to go.
Second, once the domain is pointing to your server, enable SSL on the site. From user cpanel.domain.tld > Domains > AutoSSL, select the domain from the dropdown and click Install.
Third, in cpanel.domain.tld, go to CWP Settings > Php Selector and choose from the dropdown menu your domain, then select your PHP version and click Update Version.
4
DNS Manager / Re: DNSSEC - How-to & Sub-Domains
« on: March 20, 2023, 07:17:44 AM »
******PLEASE NOTE: The workaround is supposed to be Steps 6 and Steps 9! ******
I can't it the post any now.
I can't it the post any now.
6
Information / Re: Roundcube version
« on: March 19, 2023, 11:31:05 PM »IonCube should work in PHP versions up to 7.4. Do you have it enabled in all your installed versions? If not, recompile with IonCube support.
I just checked, I do have php-fpm enabled and versions 7.4, 8.0, 8.1, 8.2, and all with ioncube enabled. I even rebuilt them all just for good measure to no avail.
What is strange is that I can't even get a php -v command output? But the server is running perfectly, speedy even!
PHP.ini hierarchy appears to be the issue, where does root use php.ini?
Code: [Select]
[root@srv roundcubemail-1.5.3]# bin/installto.sh /usr/local/cwpsrv/var/services/roundcube
PHP Warning: Missing arginfo for uploadprogress_get_info() in Unknown on line 0
PHP Warning: Missing arginfo for uploadprogress_get_contents() in Unknown on line 0
PHP Fatal error: [ionCube Loader] The Loader must appear as the first entry in the php.ini file in Unknown on line 0
[root@srv roundcubemail-1.5.3]# php -v
PHP Warning: Missing arginfo for uploadprogress_get_info() in Unknown on line 0
PHP Warning: Missing arginfo for uploadprogress_get_contents() in Unknown on line 0
PHP Fatal error: [ionCube Loader] The Loader must appear as the first entry in the php.ini file in Unknown on line 07
Information / Re: Roundcube version
« on: March 17, 2023, 03:11:04 PM »
Correct, when I run the install command, I get this error:
Code: [Select]
PHP Fatal error: [ionCube Loader] The Loader must appear as the first entry in the php.ini file in Unknown on line 0
8
DNS Manager / DNSSEC - How-to & Sub-Domains
« on: March 17, 2023, 05:16:27 AM »
Greetings, I wish to share a tutorial on enabling/using DNSSEC in your CWP install. Now, this assumes that you are running your own dns server in CWP, I do not know how it would work with FreeDNS.
For those that would like more information on DNSSEC, please look https://www.icann.org/resources/pages/dnssec-what-is-it-why-important-2019-03-05-en
This builds on a previous thread from here: https://forum.centos-webpanel.com/index.php?topic=9052.msg41413#msg41413
I will add the steps from the above link here just for posterity's sake, in case the external link goes stale.
The following steps are for EL/centos/redhat
Step 1: First install haveged to generate keys
Step 2: Change the Directory to /var/named
Step 3: Third generate ZSK Key
Step 4: Fourth generate KSK key
Step 5: add keys to domain zone file
Step 6: sign the zone file
Step 7: edit named configuration file /etc/named.conf and add this line
Step 8: In the same file as the previous step, /etc/named.conf, rename the zone file for the domain being enabled
From
To
Step 9: Centos/el/RHEL Reload/Restart the named service
In Step 5, this created a file in /var/named called dsset-domain.tld. and in this file you will find the keys that you will add to your domain registrar.
line 1 Description: 54216=Key Tag, 8=Algorithm, 1=Digest Type, long string=Digest
Online 2, the SHA-256 key will generate a space just before the end, when adding it to your registrar, you may have to remove that space.
Now, there is an issue with the current implementation of DNSSEC in CWP, once it is enabled, adding a subdomain will not work. The subdomain will be created in the /var/named/domain.tld.db but not in in /var/named/domain.tld.db.signed record, so the sub-domain will never propagate.
The workaround is to run Step 5 and Step 9 after a subdomain is created and after it is deleted.
Hope this helps,
Joao
For those that would like more information on DNSSEC, please look https://www.icann.org/resources/pages/dnssec-what-is-it-why-important-2019-03-05-en
This builds on a previous thread from here: https://forum.centos-webpanel.com/index.php?topic=9052.msg41413#msg41413
I will add the steps from the above link here just for posterity's sake, in case the external link goes stale.
The following steps are for EL/centos/redhat
Note: In the examples below, replace “domain.tld” with your domain name
Step 1: First install haveged to generate keys
Code: [Select]
yum install -y haveged
systemctl enable havegedStep 2: Change the Directory to /var/named
Code: [Select]
cd /var/named/Step 3: Third generate ZSK Key
Code: [Select]
dnssec-keygen -L 3600 -a RSASHA256 -b 2048 -r /dev/urandom domain.tldStep 4: Fourth generate KSK key
Code: [Select]
dnssec-keygen -L 3600 -r /dev/urandom -f KSK -a RSASHA256 -b 4096 domain.tldStep 5: add keys to domain zone file
Code: [Select]
cat /var/named/Kdomain.tld.+008+*.key >> /var/named/domain.tld.dbStep 6: sign the zone file
Code: [Select]
dnssec-signzone -A -3 $(head -c 1000 /dev/urandom | sha1sum | cut -b 1-16) -N INCREMENT -o domain.tld -t domain.tld.dbStep 7: edit named configuration file /etc/named.conf and add this line
Code: [Select]
dnssec-lookaside auto;** find this line, "dnssec-enable yes; dnssec-validation yes;" add "dnssec-lookaside auto;" after itStep 8: In the same file as the previous step, /etc/named.conf, rename the zone file for the domain being enabled
From
Code: [Select]
// zone domain.tld
zone "domain.tld" {type master; file "/var/named/domain.tld.db";};
// zone_end domain.tldTo
Code: [Select]
// zone domain.tld
zone "domain.tld" {type master; file "/var/named/domain.tld.db.signed";};
// zone_end domain.tldStep 9: Centos/el/RHEL Reload/Restart the named service
Code: [Select]
service named reload
or
systemctl reload namedIn Step 5, this created a file in /var/named called dsset-domain.tld. and in this file you will find the keys that you will add to your domain registrar.
Code: [Select]
domain.tld. IN DS 54216 8 1 927FCC021E55B89F279C9D8580CC6615398630747
domain.tld. IN DS 54216 8 2 D564958A48549F123B1E38AhhhE0CF9C73F5E8F4F2CE2A2442C1893C 7878666Fline 1 Description: 54216=Key Tag, 8=Algorithm, 1=Digest Type, long string=Digest
Online 2, the SHA-256 key will generate a space just before the end, when adding it to your registrar, you may have to remove that space.
Now, there is an issue with the current implementation of DNSSEC in CWP, once it is enabled, adding a subdomain will not work. The subdomain will be created in the /var/named/domain.tld.db but not in in /var/named/domain.tld.db.signed record, so the sub-domain will never propagate.
The workaround is to run Step 5 and Step 9 after a subdomain is created and after it is deleted.
Hope this helps,
Joao
9
Information / Re: Roundcube version
« on: March 15, 2023, 03:23:47 PM »
I am trying to update roundcube to 1.5 but I keep getting this error:
when I try to run the update command. Has anyone run into this?
Code: [Select]
PHP Fatal error: [ionCube Loader] The Loader must appear as the first entry in the php.ini file in Unknown on line 0 when I try to run the update command. Has anyone run into this?
10
CentOS-WebPanel Bugs / User cPanel roundcube mail link bug
« on: November 18, 2021, 09:52:04 AM »
I just updated cwp to the latest version and there is a minor bug, when clicking the "Roundcube Webmail" the new window opens with a URL that ends with two slashes, https://www.mydomain.com/webmail//
Currently this seems to only effect Password managers..
Currently this seems to only effect Password managers..
11
Backup / Re: backup is wrong
« on: August 27, 2021, 08:00:17 PM »
It works just fine for me, can you be more specific on what does not work?
Just a reminder, your restore points would only be available from the point of the update installed.
Just a reminder, your restore points would only be available from the point of the update installed.
12
E-Mail / Re: Emails Not Going in CWP
« on: August 27, 2021, 11:28:44 AM »
Contact your cloud provider, and ask them to allow outgoing mail. This is a normal procedure for new vm's to insure it is not being abused.
13
E-Mail / Re: Email sent to Gmail reaches SPAM
« on: August 22, 2021, 10:14:32 PM »
Can you provide us with the mail server domain?
15
Backup / Re: backup is wrong
« on: August 20, 2021, 07:31:43 PM »Hello
This problem is solved and will be available to you in our next new version.
Can you be a little more specific on a time frame, within a week, month year? It's kind of an important thing...
