[BLOCKING BUG] schedule backups fail if a setting in /etc/pam.d/su is set

Submitted by sgrayban on Sat, 01/10/2015 - 00:21

It's been driving me crazy since the last VM upgrade before that version this never happened....

If you have...

session optional pam_mail.so standard

set in /etc/pam.d/su the MySQL dump will fail during the scheduled backups and setting it back to the default fixes that and that shouldn't be the case..

session optional pam_mail.so nopen

the standard switch reports mail in a su login whereas the nopen mutes that.

This needs to be fixed so it works like it did in the past.

BTW this is a BLOCKER bug because all backups fail when this setting is used.

Status: 
Active

Comments

Submitted by JamieCameron on Sat, 01/10/2015 - 00:24

This sounds similar to a MySQL backup bug that other users on Debian reported. The simpler fix is to edit /etc/webmin/mysql/config and add the line login=root

Submitted by dabol on Sat, 01/10/2015 - 05:09 Pro Licensee

thanks you, it works !

but i wait the patch to remove this line, i dont like billy's use for all backups ^^

Submitted by JamieCameron on Sat, 01/10/2015 - 11:33

Scott - was that PAM setting on your system by default?

Submitted by sgrayban on Sat, 01/10/2015 - 16:13

I'm not sure as both servers have been upgraded with new versions for the past 3 years.

In any case I didn't have this problem until the last VM update.

Submitted by JamieCameron on Sat, 01/10/2015 - 16:38

The new version runs MySQL backups as domain users, rather than as root - that may be the cause.

Submitted by dabol on Sat, 01/10/2015 - 16:42 Pro Licensee

yes : in Version 4.13 (5th January 2015)

"All operations performed by Virtualmin on files in a domain's home directory are now done with the user's permissions, to prevent attacks involving a malicious symbolic or hard link."

its this ^^

Submitted by sgrayban on Sat, 01/10/2015 - 16:47

that sucks... but i understand

Submitted by Shirehosting on Sun, 01/11/2015 - 08:34 Pro Licensee

I just installed 4.13-2 to fix the above issue and now apache will not start.

error is :

Failed to start service :

Starting web server: apache2Syntax error on line 38 of /etc/apache2/sites-enabled/mjbcontrols.com.au.conf: Invalid command 'php_admin_value', perhaps misspelled or defined by a module not included in the server configuration Action 'start' failed. The Apache error log may have more information. failed!

4.13-2 was the only update done at the time, server was working other then the msql issue prior to the -2 update. Any ideas as I now have sites down ?

Thanks

Submitted by andreychek on Sun, 01/11/2015 - 09:25

That error can occur if mod_php is disabled. On Ubuntu/Debian, you can enable it by running this command:

a2enmod php5

Alternatively, you could also comment out the "php_admin_value" lines in your Apache config.

Submitted by Shirehosting on Sun, 01/11/2015 - 16:34 Pro Licensee

Hi.

I tried to enable it as above and now Im getting this error.

Failed to start service :

Starting web server: apache2apache2: Syntax error on line 244 of /etc/apache2/apache2.conf: Syntax error on line 1 of /etc/apache2/mods-enabled/php5.load: Cannot load /usr/lib/apache2/modules/libphp5.so into server: /usr/lib/apache2/modules/libphp5.so: cannot open shared object file: No such file or directory Action 'start' failed. The Apache error log may have more information. failed!

Any ideas ?

Thanks

Submitted by andreychek on Sun, 01/11/2015 - 16:43

It sounds like you're seeing an unrelated issue Shirehosting -- we're happy to help out, but could you open up a separate request? Then we can work with you to figure out what's going on there.

When opening that new request, let us know the output of this command:

dpkg -l libapache2-mod-php5

Thanks!

Submitted by Shirehosting on Sun, 01/11/2015 - 18:10 Pro Licensee

Thanks

Ill continue on a new ticket