Koozali.org: home of the SME Server

server-manager and webmail not working after upgrade

Offline yelnic

  • *
  • 33
  • +0/-0
server-manager and webmail not working after upgrade
« on: September 06, 2013, 07:59:45 AM »
I recently upgraded a customer from 7 to 8 by doing a clean v8 install on a new machine and restoring the DAR2 backup from the v7 machine.  I had some issues with client PCs, so I left the v7 machine running until I could get back to it.  When I had time to complete the migration I did another restore of the DAR2 from the v7 machine and all seemed to go well.  Clients are happily using their email.

The problems start when I try to log into the server-manager as admin.  I get "invalid username or password" and I'm using the original combo that used to work.  I can ssh into the shell just fine and I reset the admin password using passwd to what it should be and still have no luck at all logging into the server-manager.

Also, when I try to access webmail I get a blank white screen.

From /var/log/httpd/error_log:

Code: [Select]
[Fri Sep 06 01:19:59 2013] [notice] SSL FIPS mode disabled
[Fri Sep 06 01:20:00 2013] [warn] RSA server certificate is a CA certificate (Ba
sicConstraints: CA == TRUE !?)
[Fri Sep 06 01:20:00 2013] [warn] RSA server certificate CommonName (CN) `mail.<domainname>.com' does NOT match server name!?
[Fri Sep 06 01:20:00 2013] [notice] Digest: generating secret for digest authent
ication ...
[Fri Sep 06 01:20:00 2013] [notice] Digest: done
[Fri Sep 06 01:20:03 2013] [notice] SSL FIPS mode disabled
[Fri Sep 06 01:20:03 2013] [warn] RSA server certificate is a CA certificate (Ba
sicConstraints: CA == TRUE !?)
[Fri Sep 06 01:20:03 2013] [warn] RSA server certificate CommonName (CN) `mail.<domainname>.com' does NOT match server name!?
[Fri Sep 06 01:20:03 2013] [notice] Apache configured -- resuming normal operati
ons

I can't find anywhere with a strange domain name.

I'm stumped.


Offline pmstewart

  • *
  • 73
  • +0/-0
Re: server-manager and webmail not working after upgrade
« Reply #1 on: September 06, 2013, 07:14:37 PM »
yelnic

Have you tried logging in from mutiple machines or just one?? Using multiple browsers or just IE?? and if so what version of IE??

Have you actually tried logging in to the e-links browser from the console to see if that works?

Offline yelnic

  • *
  • 33
  • +0/-0
Re: server-manager and webmail not working after upgrade
« Reply #2 on: September 06, 2013, 10:56:48 PM »
yelnic

Have you tried logging in from mutiple machines or just one?? Using multiple browsers or just IE?? and if so what version of IE??

Have you actually tried logging in to the e-links browser from the console to see if that works?

Thanks for the response.

I have tried multiple machines, Windows XP, Windows 7, Red Hat Linux 5, IE8, FF23, Chrome29.  Tried the e-links from the console too.  I have also scoured the forums and the documentation.

Any other ideas?

Offline janet

  • ****
  • 4,812
  • +0/-0
Re: server-manager and webmail not working after upgrade
« Reply #3 on: September 07, 2013, 03:16:43 AM »
yelnic

Did you search omn the error ?
"RSA server certificate CommonName (CN) `mail.<domainname>.com' does NOT match server name!?"

My (wild) guess is that the restore did not correctly or fully restore.
Check the db setting for CommonName

Maybe you should run the Configure this server from the console.

Did you restore to a clean installation of sme8 OS, the second time you did the restore ?
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline yelnic

  • *
  • 33
  • +0/-0
Re: server-manager and webmail not working after upgrade
« Reply #4 on: September 07, 2013, 05:33:19 AM »
yelnic

Did you search omn the error ?
"RSA server certificate CommonName (CN) `mail.<domainname>.com' does NOT match server name!?"

I searched on CommonName but didn't see anything that seemed to apply.

My (wild) guess is that the restore did not correctly or fully restore.
Check the db setting for CommonName

That's what I was thinking too.

Maybe you should run the Configure this server from the console.

Did you restore to a clean installation of sme8 OS, the second time you did the restore ?

No, I re-restored over the original restore and I have a fear that may be the cause of my problems.  Now I'm just looking for a solution.

I will attempt the console configuration.  If that doesn't work, do you have any other ideas?

Thanks for the reply.

Offline janet

  • ****
  • 4,812
  • +0/-0
Re: server-manager and webmail not working after upgrade
« Reply #5 on: September 07, 2013, 02:10:54 PM »
yelnic

Quote
I re-restored over the original restore...

Restore should ONLY be done to a clean install of sme 8 OS.
Ideally you should repeat the restore.
There may be a number of hidden issues depending what changes you made to the first install/restore.

You need to heed the error message(s) & fix the issue(s) identified. Take a look at the Certificates Concepts Howto re resetting the certificate.
As I already suggested check the db setting for CommonName.
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline pmstewart

  • *
  • 73
  • +0/-0
Re: server-manager and webmail not working after upgrade
« Reply #6 on: September 07, 2013, 02:20:57 PM »
yelnic,

not knowing your configuration or the full content you backed up and restored in the dar2 backup......it is difficult to know exactly why the second overwrite brought problems.

You installed clean sme8 and restored only part of the data a small amount at a time?? or all at once?? .....did you experience any problems the first go around??

I think Janet onto something as I've experienced the same cn problem before.....

Offline pmstewart

  • *
  • 73
  • +0/-0
Re: server-manager and webmail not working after upgrade
« Reply #7 on: September 07, 2013, 04:49:15 PM »
I'm also experiencing problems logging into the console of at least one machine after updates even though I can ssh into the box and the web interface will let me in......bizzare to say the least......LOL

Offline yelnic

  • *
  • 33
  • +0/-0
Re: server-manager and webmail not working after upgrade
« Reply #8 on: September 08, 2013, 07:32:18 AM »
yelnic,

not knowing your configuration or the full content you backed up and restored in the dar2 backup......it is difficult to know exactly why the second overwrite brought problems.

You installed clean sme8 and restored only part of the data a small amount at a time?? or all at once?? .....did you experience any problems the first go around??

I think Janet onto something as I've experienced the same cn problem before.....

I did a full restore again.  The first time it worked fine, but the clients weren't set up so I left the v7 server running instead of the v8 server.  When I was ready to change all twenty client machines I did another full backup on the v7 machine and a full restore (again) onto the v8 machine.  That's when the trouble started.

I can't find a command for the db settings for CommonName.  I've looked at the db command tutorial, but don't know how to do db for CN.

Thanks.

Offline janet

  • ****
  • 4,812
  • +0/-0
Re: server-manager and webmail not working after upgrade
« Reply #9 on: September 08, 2013, 08:48:12 AM »
yelnic

The 23rd forum search result for CommonName, and the answer is also in one of the Certificate howtos.
http://forums.contribs.org/index.php/topic,45241.msg219420.html#msg219420

Quote
I can't find a command for the db settings for CommonName.  I've looked at the db command tutorial, but don't know how to do db for CN.
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline yelnic

  • *
  • 33
  • +0/-0
Re: server-manager and webmail not working after upgrade
« Reply #10 on: September 08, 2013, 10:17:17 AM »
yelnic

The 23rd forum search result for CommonName, and the answer is also in one of the Certificate howtos.
http://forums.contribs.org/index.php/topic,45241.msg219420.html#msg219420

I did the db commands and still no luck.

In /var/log/admin_error_log I found the following information:

Code: [Select]
[Sun Sep 08 03:44:43 2013] [error] [client 127.0.0.1] Can't exec "/usr/lib64/htt
pd/modules/pwauth": Permission denied at /etc/e-smith/web/common/cgi-bin/login l
ine 57., referer: https://mail.<domain name>.com/server-common/cgi-bin/login
[Sun Sep 08 03:44:43 2013] [error] [client 127.0.0.1] Could not open pipe to pwa
uth: Permission denied at /etc/e-smith/web/common/cgi-bin/login line 59., refere
r: https://mail.<domain name>.com/server-common/cgi-bin/login
[Sun Sep 08 03:45:03 2013] [error] [client 127.0.0.1] Can't exec "/usr/lib64/htt
pd/modules/pwauth": Permission denied at /etc/e-smith/web/common/cgi-bin/login l
ine 57., referer: https://mail.<domain name>.com/server-common/cgi-bin/login?ba
ck=http%3a%2f%2fmail.priceattorneys.com%2fserver-manager%2f
[Sun Sep 08 03:45:03 2013] [error] [client 127.0.0.1] Could not open pipe to pwa
uth: Permission denied at /etc/e-smith/web/common/cgi-bin/login line 59., refere
r: https://mail.<domain name>.com/server-common/cgi-bin/login?back=http%3a%2f%2
fmail.priceattorneys.com%2fserver-manager%2f
[Sun Sep 08 04:05:46 2013] [error] [client 127.0.0.1] Can't exec "/usr/lib64/htt
pd/modules/pwauth": Permission denied at /etc/e-smith/web/common/cgi-bin/login l
ine 57., referer: https://mail.<domain name>.com/server-common/cgi-bin/login?ba
ck=http%3a%2f%2fmail.<domain name>.com%2fserver-manager%2f

I checked the permissions on /usr/lib64/httpd/modules/pwauth and they are the same (-r-sr-x---) as on another v8 install.

I looked at /etc/e-smith/web/common/cgi-bin/login (-rwxr-xr-x) and found this:

Code: [Select]
sub validate
{
  my ($username, $password) = @_;
  my $pwauth = -f "/usr/lib64/httpd/modules/pwauth" ? "/usr/lib64/httpd/modules/
pwauth" : "/usr/lib/httpd/modules/pwauth";
  unless (open(PWAUTH, "|$pwauth"))   <---<< Line 57
  {
    warn "Could not open pipe to pwauth: $!";
    return 0;
  }

Again, I checked it against another v8 install and it's the same.

Where can I go from here?

Thanks.

Offline janet

  • ****
  • 4,812
  • +0/-0
Re: server-manager and webmail not working after upgrade
« Reply #11 on: September 08, 2013, 10:27:41 AM »
yelnic

I advise you to lodge a bug report, the link is at the top of these forums.
You will have to be systematic with your answers & provide all details requested.
Many things have happened to your server & a more ordered diagnostic approach is needed to unravel your issue(s).

Please report the bug number back here.
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline yelnic

  • *
  • 33
  • +0/-0
Re: server-manager and webmail not working after upgrade
« Reply #12 on: September 08, 2013, 05:01:41 PM »
I advise you to lodge a bug report, the link is at the top of these forums.
You will have to be systematic with your answers & provide all details requested.
Many things have happened to your server & a more ordered diagnostic approach is needed to unravel your issue(s).

Please report the bug number back here.

I just remembered the one thing I have not had a chance to try is a configure through the console (I haven't been on site yet).  I will try that today and if I don't get good results I will lodge a bug report.

Thanks for all of your help.

Offline pmstewart

  • *
  • 73
  • +0/-0
Re: server-manager and webmail not working after upgrade
« Reply #13 on: September 08, 2013, 05:07:08 PM »
For everyone's sake I hope you can log in at the console......I am going onsite to several of my locations tomorrow to see if console login works since the server I've upgraded and a test server here at my office don't allow me to log in at the console......

Good luck

**turns out there is only one server which has the console (tty1) login problem**
« Last Edit: September 11, 2013, 07:34:47 PM by pmstewart »

Offline janet

  • ****
  • 4,812
  • +0/-0
Re: server-manager and webmail not working after upgrade
« Reply #14 on: September 08, 2013, 06:50:07 PM »
yelnic

As you are going to lodge a bug report, then it is probably best you do not make any more configuration changes.
You erase the forensic trail by making more changes, so I suggest you report the issue first in bugzilla & only do what is requested of you by the troubleshooters & developers.

Do you have remote ssh access to this server ? Having that setup or allowed certainly saves you having to go on site for every little change or tweak or yum upgrade.

What was the sme 7.x version you upgraded from ?
It is recommended to upgrade to tge latest sme7.6 before doing a sme 8.0 upgrade.

Also what were the issues you had with your clients the first time you upgraded ? You said you needed to tweak the clients (I assume that means Window workstations), so instead you reverted to sme 7 ? Something was obviously wrong with your backup or restore or upgrade procedure right from the very start and this could be the underlying cause of your issues. This cannot be ignored when diagnosing what is going on here.

Also what contribs or other packages do you have installed ?
Have you checked that these are compatible with sme 8 ?

Also what custom changes eg custom templates & similar tweaks have you made to your sme 7 server, & have you reviewed and/or removed these in sme 8 ?

To pmstewart, you should lodge a seperate bug report & stop tacking on your problem to an existing forum thread. It may sound similar but the reasons could be different, so please lodge a bug report also giving as much detail as possible. Also provide the bug report number here.
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.