webadmin-list — Webmin users mailing list

Re: [webmin-l] Let's Encrypt Missing slash / before .well-known

[Kimberly <kim...@gm...>]

I don't see where to go to fix this problem.  it is looking for a domain 
with the TLD of well-known, not the directory well-known.  I can try 
logging in as root but I am not an Apache person, Nginx, I know, Apache, 
not so much.



On 5/24/2017 5:22 PM, Kimberly wrote:
> On the Apache based Virtualmin Server I am seeing when I try to request
> the certificate/renewal the following:
>
> Domain: domain.tld
>
> Type: connection
>
> Detail: Could not connect to domain.tld.well-known
>
> And the same for the www.domain.tld.
>
> Shouldn't there be a slash (/) before the .well-known and if yes, how do
> I fix this?
>
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>

Re: [webmin-l] 4.99 letsencrypt new features not working?

[Jamie C. <jca...@we...>]

You don't need to use that button - it copies the cert to the
Dovecot default. Instead, there is a setting on the Virtualmin
Configuration page under "SSL settings" called "Copy per-IP SSL
certificates to Dovecot?"

This will enable copying for new domains, or when SSL is enabled
for existing domains.

On 24/May/2017 22:20 Pat Erler <pe...@gm...> wrote ..
> changelog says:
> 
> 
>    - SSL certificates can now be copied to Dovecot even for virtual servers
>    that don't have their own private IP address.
>    - The SSL certificate for all virtual servers will now be configured for
>    use in the Virtualmin UI on port 10000, so that URLs like
>    https://admin.domain.com:10000/ work without cert errors.
> 
> 
> but when I press "copy to.." webmin/dovecot the certificates for all
> domains get overwritten (ie the "main" domain)
> 
> so, either this setting is somewhere else or it doesn't seem to work?
> 
> best,
> 
> PAT
> 
> --

[webmin-l] ssl certificate - copy to dovecot misses intermediate certs

[Pat E. <pe...@gm...>]

I just realised, that the "copy to dovecot" button copies the certificate
but not the ca certificate from

/home/domain/ssl.ca to /etc/dovecot/dovecot.ca.pem

this is for "real" certificates (not letsencrypt, which seems to be broken
in regard to dovecot anyways, see earlier mail here)
--

[webmin-l] 4.99 letsencrypt new features not working?

[Pat E. <pe...@gm...>]

changelog says:


   - SSL certificates can now be copied to Dovecot even for virtual servers
   that don't have their own private IP address.
   - The SSL certificate for all virtual servers will now be configured for
   use in the Virtualmin UI on port 10000, so that URLs like
   https://admin.domain.com:10000/ work without cert errors.


but when I press "copy to.." webmin/dovecot the certificates for all
domains get overwritten (ie the "main" domain)

so, either this setting is somewhere else or it doesn't seem to work?

best,

PAT

--

[webmin-l] Let's Encrypt Missing slash / before .well-known

[Kimberly <kim...@gm...>]

On the Apache based Virtualmin Server I am seeing when I try to request 
the certificate/renewal the following:

Domain: domain.tld

Type: connection

Detail: Could not connect to domain.tld.well-known

And the same for the www.domain.tld.

Shouldn't there be a slash (/) before the .well-known and if yes, how do 
I fix this?

Re: [webmin-l] /webmin/proc/index_cpu.cgi runs at 20-100% load

[Oliver D. <oli...@gm...>]

Actually 111 and index_cpu.cgi has calmed down. Maybe this was just
for a while after template update.

2017-05-24 2:16 GMT+02:00 Jamie Cameron <jca...@we...>:
> On 23/May/2017 12:51 Oliver Dietzel <oli...@gm...> wrote ..
>> 30175 root 20.5 % /usr/libexec/webmin/proc/index_cpu.cgi
>>
>> How may i find out what it does?
>>
>> System is a Centos 7 on ARM Scaleway instance.
>>
>> CentOS Linux 7.3.1611, Webmin-Version 1.840, Design-Version Authentic
>> Design 18.49-5, Kernel and CPU Linux 4.9.20-std-1 on armv7l
>
> All that script does is list running processes on your system. How many
> processes do you have?
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list

Re: [webmin-l] Let's encrypt renewal

[Jamie C. <jca...@we...>]

On 23/May/2017 14:42 Kimberly <kim...@gm...> wrote ..
> Another issue; I forgot to include the www for a domain; now when trying 
> to add the www.domain.tld to the certificate it says the domain.tld 
> verifies but not the www.domain.tld.

Perhaps there is no DNS record for www.domain?
 
> On 5/23/2017 1:36 PM, Kimberly wrote:
> > Is there an issue with renewing Let's Encrypt certificates on
> > Virtualmin?  What is the button titled "Only Update Renewal" for? When I
> > click on it from the Let's Encrypt tab, it just takes me back to the
> > Current Certificate tab.  I cannot seem to be able to update Let's
> > Encrypt certificates on Virtualmin.  Is there a manual way I can do it
> > for each domain and have the certificate renewed and properly stored in
> > the correct place?

That button just changes how often automatic renewal will happen, but doesn't
immediately re-request a cert.

Re: [webmin-l] /webmin/proc/index_cpu.cgi runs at 20-100% load

[Jamie C. <jca...@we...>]

On 23/May/2017 12:51 Oliver Dietzel <oli...@gm...> wrote ..
> 30175 root 20.5 % /usr/libexec/webmin/proc/index_cpu.cgi
> 
> How may i find out what it does?
> 
> System is a Centos 7 on ARM Scaleway instance.
> 
> CentOS Linux 7.3.1611, Webmin-Version 1.840, Design-Version Authentic
> Design 18.49-5, Kernel and CPU Linux 4.9.20-std-1 on armv7l

All that script does is list running processes on your system. How many
processes do you have?

Re: [webmin-l] Let's encrypt renewal

[Kimberly <kim...@gm...>]

Another issue; I forgot to include the www for a domain; now when trying 
to add the www.domain.tld to the certificate it says the domain.tld 
verifies but not the www.domain.tld.

On 5/23/2017 1:36 PM, Kimberly wrote:
> Is there an issue with renewing Let's Encrypt certificates on
> Virtualmin?  What is the button titled "Only Update Renewal" for? When I
> click on it from the Let's Encrypt tab, it just takes me back to the
> Current Certificate tab.  I cannot seem to be able to update Let's
> Encrypt certificates on Virtualmin.  Is there a manual way I can do it
> for each domain and have the certificate renewed and properly stored in
> the correct place?
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>

[webmin-l] /webmin/proc/index_cpu.cgi runs at 20-100% load

[Oliver D. <oli...@gm...>]

30175 root 20.5 % /usr/libexec/webmin/proc/index_cpu.cgi

How may i find out what it does?

System is a Centos 7 on ARM Scaleway instance.

CentOS Linux 7.3.1611, Webmin-Version 1.840, Design-Version Authentic
Design 18.49-5, Kernel and CPU Linux 4.9.20-std-1 on armv7l

[webmin-l] Let's encrypt renewal

[Kimberly <kim...@gm...>]

Is there an issue with renewing Let's Encrypt certificates on 
Virtualmin?  What is the button titled "Only Update Renewal" for? When I 
click on it from the Let's Encrypt tab, it just takes me back to the 
Current Certificate tab.  I cannot seem to be able to update Let's 
Encrypt certificates on Virtualmin.  Is there a manual way I can do it 
for each domain and have the certificate renewed and properly stored in 
the correct place?

Re: [webmin-l] Problem with Usermin and login

[John H. <web...@ew...>]

On 5/23/2017 10:54 AM, Nigel Aves wrote:
>
> John,
>
> Not an IPhone, so for once I cannot blame Apple! I have an Android LG 
> tablet, I tried using Chrome and Firefox with the same result (tried 
> on three different days).
>
> I'm using the self signed certificate that is supplied with webmin / 
> usermin, I don't think it was a connection issue as I did get to the 
> login screen all OK, that's where I had the "Login failed. Please try 
> again". Not had an issue in past. Just tried it using the "home 
> network" and it's all working ok. I didn't change location / network 
> on my trip, which was to the UK. I did also try using 4G (throttled to 
> 2G by TMobile in UK) and a straight wireless network connection.
>
> I'm the only person who has access to the server, so I know that 
> nothing changed there, which is why I feared I had been "hacked".
>
> I do run mod_evasive and mod_security, but if it had been one of those 
> interacting I would have expected a different message.
>
> Many thanks for your thoughts.
>
> Nigel.
>
You are welcome. Those ideas were a bit of a stab in the dark based on 
one of my customers hitting the iPhone upgrade issue with email while 
she traveled in Europe. The only other thing I can think of is that most 
mobile devices strongly cache pages to save your data usage. Maybe the 
login page was just a cached page and until you hit submit to login, 
there may have been no interaction with the server? What happened is 
very odd. Yet since it started working fine again when you got home, I'm 
still thinking it may have been a firewall issue on the remote networks. 
Just like many will not allow the use of port 25 except for that 
network's email. I'm not sure if this would generate the "Login failed. 
Please try again." error though. Being a road warrior can be difficult.

Sorry I didn't have a good answer. And I wasn't trying to bash Apple, 
although I do get a bit irritated with taking away a user's ability to 
make a decision about something.

John
>
> On 5/23/2017 7:29 AM, John Hinton wrote:
>> On 5/22/2017 3:14 PM, Nigel Aves wrote:
>>> Often when I am traveling I will allow Usermin to be accessed from the
>>> net so I can check emails.
>>>
>>> I was away for three weeks, did the above, allowed access to the port
>>> I use (not 10000), tested from home and all was good.
>>>
>>> For the first week everything worked well and I could access my email
>>> etc. But then I started getting the message that the password was not
>>> recognized. I tried it on different devices but the same message
>>> appeared.
>>>
>>> Yesterday on my return (and fearing someone had hijacked the server) I
>>> checked the server over, and nothing had changed. Password was as it
>>> was set, Thunderbird could access the server with no issues and
>>> download emails etc.
>>>
>>> I've used this method on about 5 trips with never an issue, can anyone
>>> think why this should have happened?
>>>
>> Is this an iPhone? Was there perhaps an OS upgrade pushed to it at about
>> the end of that first week? Are you using a legit cert or a self signed
>> cert for Usermin? Apple has gotten really finicky about this on their
>> mail program, removing the override option. I don't know this is the
>> problem you had, but I would think that would be a good place to start
>> looking.
>>
>> And lastly, does it work now that you are home? If so, maybe a firewall
>> issue on the network you were using while away? Did you change
>> locations/networks at that one week mark?
>>
>> John
>>
>>
>> ------------------------------------------------------------------------------
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org!http://sdm.link/slashdot
>> -
>> Forwarded by the Webmin mailing list atw...@li...
>> To remove yourself from this list, go to
>> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>>
>>
>>
>
> -- 
>
> from the desk of Nigel
>
> http://soft-focus-imagining.com
> http://twin-peaks-video.com
>
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list

Re: [webmin-l] Problem with Usermin and login

[Nigel A. <ni...@tw...>]

John,

Not an IPhone, so for once I cannot blame Apple! I have an Android LG 
tablet, I tried using Chrome and Firefox with the same result (tried on 
three different days).

I'm using the self signed certificate that is supplied with webmin / 
usermin, I don't think it was a connection issue as I did get to the 
login screen all OK, that's where I had the "Login failed. Please try 
again". Not had an issue in past. Just tried it using the "home network" 
and it's all working ok. I didn't change location / network on my trip, 
which was to the UK. I did also try using 4G (throttled to 2G by TMobile 
in UK) and a straight wireless network connection.

I'm the only person who has access to the server, so I know that nothing 
changed there, which is why I feared I had been "hacked".

I do run mod_evasive and mod_security, but if it had been one of those 
interacting I would have expected a different message.

Many thanks for your thoughts.

Nigel.

On 5/23/2017 7:29 AM, John Hinton wrote:
>
> On 5/22/2017 3:14 PM, Nigel Aves wrote:
>> Often when I am traveling I will allow Usermin to be accessed from the
>> net so I can check emails.
>>
>> I was away for three weeks, did the above, allowed access to the port
>> I use (not 10000), tested from home and all was good.
>>
>> For the first week everything worked well and I could access my email
>> etc. But then I started getting the message that the password was not
>> recognized. I tried it on different devices but the same message
>> appeared.
>>
>> Yesterday on my return (and fearing someone had hijacked the server) I
>> checked the server over, and nothing had changed. Password was as it
>> was set, Thunderbird could access the server with no issues and
>> download emails etc.
>>
>> I've used this method on about 5 trips with never an issue, can anyone
>> think why this should have happened?
>>
> Is this an iPhone? Was there perhaps an OS upgrade pushed to it at about
> the end of that first week? Are you using a legit cert or a self signed
> cert for Usermin? Apple has gotten really finicky about this on their
> mail program, removing the override option. I don't know this is the
> problem you had, but I would think that would be a good place to start
> looking.
>
> And lastly, does it work now that you are home? If so, maybe a firewall
> issue on the network you were using while away? Did you change
> locations/networks at that one week mark?
>
> John
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
>
>

-- 

from the desk of Nigel

http://soft-focus-imagining.com
http://twin-peaks-video.com

Re: [webmin-l] Problem with Usermin and login

[John H. <web...@ew...>]

On 5/22/2017 3:14 PM, Nigel Aves wrote:
> Often when I am traveling I will allow Usermin to be accessed from the 
> net so I can check emails.
>
> I was away for three weeks, did the above, allowed access to the port 
> I use (not 10000), tested from home and all was good.
>
> For the first week everything worked well and I could access my email 
> etc. But then I started getting the message that the password was not 
> recognized. I tried it on different devices but the same message 
> appeared.
>
> Yesterday on my return (and fearing someone had hijacked the server) I 
> checked the server over, and nothing had changed. Password was as it 
> was set, Thunderbird could access the server with no issues and 
> download emails etc.
>
> I've used this method on about 5 trips with never an issue, can anyone 
> think why this should have happened?
>
Is this an iPhone? Was there perhaps an OS upgrade pushed to it at about 
the end of that first week? Are you using a legit cert or a self signed 
cert for Usermin? Apple has gotten really finicky about this on their 
mail program, removing the override option. I don't know this is the 
problem you had, but I would think that would be a good place to start 
looking.

And lastly, does it work now that you are home? If so, maybe a firewall 
issue on the network you were using while away? Did you change 
locations/networks at that one week mark?

John

[webmin-l] Problem with Usermin and login

[Nigel A. <ni...@tw...>]

Often when I am traveling I will allow Usermin to be accessed from the 
net so I can check emails.

I was away for three weeks, did the above, allowed access to the port I 
use (not 10000), tested from home and all was good.

For the first week everything worked well and I could access my email 
etc. But then I started getting the message that the password was not 
recognized. I tried it on different devices but the same message appeared.

Yesterday on my return (and fearing someone had hijacked the server) I 
checked the server over, and nothing had changed. Password was as it was 
set, Thunderbird could access the server with no issues and download 
emails etc.

I've used this method on about 5 trips with never an issue, can anyone 
think why this should have happened?

Re: [webmin-l] Release Version of Virtualmin?

[MAR <we...@ro...>]

Webmin.com - redhat rpm.

Jamie Cameron <jca...@we...> wrote ..
> On 21/May/2017 11:35 MAR <we...@ro...> wrote ..
> > 
> > When I download the most recent virtualmin package, it says it is 5.99 in the
> name.
> > When I go to install it, I get an error saying 5.07 already installed....
> 
> Where did you download it from, and in what format?
> 
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list

Re: [webmin-l] Release Version of Virtualmin?

[Jamie C. <jca...@we...>]

On 21/May/2017 11:35 MAR <we...@ro...> wrote ..
> 
> When I download the most recent virtualmin package, it says it is 5.99 in the name.
> When I go to install it, I get an error saying 5.07 already installed....

Where did you download it from, and in what format?

[webmin-l] Release Version of Virtualmin?

[MAR <we...@ro...>]

When I download the most recent virtualmin package, it says it is 5.99 in the name.  When I go to install it, I get an error saying 5.07 already installed....

-Mike

Re: [webmin-l] Apache2 down after package update

[Jamie C. <jca...@we...>]

Using Webmin's own webserver as a backup isn't really possible - it is very
simple and specialized (it exists only to run the Webmin UI), and so lacks
most of the features of Apache. For example, it can't even run PHP scripts!

On 21/May/2017 09:59 Teknoskillz <tek...@co...> wrote ..
> Gave up in solving this problem, and as per other recommendations, I will be 
> trying Nigix out soon.
> 
> I notices that Webmin's built-in webserver , which is what we log into for 
> the interface was not effected while Apache was down,
> which was a great feature.
> 
> Since there is a movement away from apache to a degree, and I guess there is 
> a Virtualmin module now for Nigix, would it be possible to use
> Webmin's built-in webserver as a backup of some sorts in the event Apache 
> goes down? Perhaps a monitor of some sorts could be devised?
> 
> Probably alot of work, but also would be nice if there was a redundancy 
> where someone could select their primary as Apache or Nigix, and
> if possible use Webmins server as the last resort.
> 
> I suppose Webmins http server cant do everything that Apache2 does, and some 
> sites may not work 100%, but it sould at least help keep some sites
> up that are only using plain http these days. I know they are few (myself 
> included) but when this Apache2 problem hit, I was taken out of the search 
> engines
> and all http connections were refused.
> 
> Just some feedback and some thoughts for development to Jamie.
> 
> 
> ----- Original Message ----- 
> From: "Teknoskillz" <tek...@co...>
> To: "Webmin users list" <web...@li...>
> Sent: Sunday, April 30, 2017 1:58 AM
> Subject: Re: [webmin-l] Apache2 down after package update
> 
> 
> >
> > Thought I would try a rollback by doing:
> >
> > apt-get install apache2=2.4.18-2ubuntu3.1
> >
> > Turns out there are dependencies missing, so someone on another list
> > sugguested:
> >
> >> The missing dependencies are probably apache2-data apache2-utils . Try
> >> "apt-get install apache2 apache2-data apache2-utils"
> >
> >
> > Tried that, seems like those go in and still it tries to put in apache
> > 2.4.25 even after its purged? Like we arent allowed to use previous Apache
> > versions anymore? Or is maybe the auto updater locking something
> > so the new version is always referenced?
> >
> > =====================================================================================
> > sudo apt-get --purge remove apache2
> > Reading package lists... Done
> > Building dependency tree
> > Reading state information... Done
> > The following packages were automatically installed and are no longer
> > required:
> >  apache2-data apache2-utils
> > Use 'sudo apt autoremove' to remove them.
> > The following packages will be REMOVED:
> >  apache2*
> > 0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
> > After this operation, 514 kB disk space will be freed.
> > Do you want to continue? [Y/n] y
> > (Reading database ... 70372 files and directories currently installed.)
> > Removing apache2 (2.4.25-3+deb.sury.org~xenial+1) ...
> > Purging configuration files for apache2 (2.4.25-3+deb.sury.org~xenial+1) 
> > ...
> > dpkg: warning: while removing apache2, directory '/var/www/html' not empty
> > so no
> > t removed
> > dpkg: warning: while removing apache2, directory
> > '/etc/apache2/sites-enabled' no
> > t empty so not removed
> > dpkg: warning: while removing apache2, directory 
> > '/etc/apache2/conf-enabled'
> > not
> > empty so not removed
> > Processing triggers for man-db (2.7.5-1) ...
> > :~# sudo apt-get autoremove
> > Reading package lists... Done
> > Building dependency tree
> > Reading state information... Done
> > The following packages will be REMOVED:
> >  apache2-data apache2-utils
> > 0 upgraded, 0 newly installed, 2 to remove and 0 not upgraded.
> > After this operation, 1,203 kB disk space will be freed.
> > Do you want to continue? [Y/n] y
> > (Reading database ... 70164 files and directories currently installed.)
> > Removing apache2-data (2.4.25-3+deb.sury.org~xenial+1) ...
> > Removing apache2-utils (2.4.25-3+deb.sury.org~xenial+1) ...
> > Processing triggers for man-db (2.7.5-1) ...
> > ~# apt-get install apache2 apache2-data apache2-utils
> > Reading package lists... Done
> > Building dependency tree
> > Reading state information... Done
> > Suggested packages:
> >  www-browser apache2-doc
> > The following NEW packages will be installed:
> >  apache2 apache2-data apache2-utils
> > 0 upgraded, 3 newly installed, 0 to remove and 0 not upgraded.
> > Need to get 0 B/462 kB of archives.
> > After this operation, 1,717 kB of additional disk space will be used.
> > Selecting previously unselected package apache2-utils.
> > (Reading database ... 69850 files and directories currently installed.)
> > Preparing to unpack
> > .../apache2-utils_2.4.25-3+deb.sury.org~xenial+1_amd64.deb .
> > ..
> > Unpacking apache2-utils (2.4.25-3+deb.sury.org~xenial+1) ...
> > Selecting previously unselected package apache2-data.
> > Preparing to unpack 
> > .../apache2-data_2.4.25-3+deb.sury.org~xenial+1_all.deb
> > ...
> > Unpacking apache2-data (2.4.25-3+deb.sury.org~xenial+1) ...
> > Selecting previously unselected package apache2.
> > Preparing to unpack .../apache2_2.4.25-3+deb.sury.org~xenial+1_amd64.deb 
> > ...
> > Unpacking apache2 (2.4.25-3+deb.sury.org~xenial+1) ...
> > Processing triggers for man-db (2.7.5-1) ...
> > Processing triggers for systemd (229-4ubuntu17) ...
> > Processing triggers for ureadahead (0.100.0-19) ...
> > Setting up apache2-utils (2.4.25-3+deb.sury.org~xenial+1) ...
> > Setting up apache2-data (2.4.25-3+deb.sury.org~xenial+1) ...
> > Setting up apache2 (2.4.25-3+deb.sury.org~xenial+1) ...
> > Enabling module mpm_event.
> > Enabling module authz_core.
> > Enabling module authz_host.
> > Enabling module authn_core.
> > Enabling module auth_basic.
> > Enabling module access_compat.
> > Enabling module authn_file.
> > Enabling module authz_user.
> > Enabling module alias.
> > Enabling module dir.
> > Enabling module autoindex.
> > Enabling module env.
> > Enabling module mime.
> > Enabling module negotiation.
> > Enabling module setenvif.
> > Enabling module filter.
> > Enabling module deflate.
> > Enabling module status.
> > Enabling module reqtimeout.
> > Enabling conf charset.
> > Enabling conf localized-error-pages.
> > Enabling conf other-vhosts-access-log.
> > Enabling conf security.
> > Enabling conf serve-cgi-bin.
> > Enabling site 000-default.
> > Job for apache2.service failed because the control process exited with 
> > error
> > cod
> > e. See "systemctl status apache2.service" and "journalctl -xe" for 
> > details.
> > invoke-rc.d: initscript apache2, action "start" failed.
> > ? apache2.service - LSB: Apache2 web server
> >   Loaded: loaded (/etc/init.d/apache2; enabled; vendor preset: enabled)
> >   Active: activating (auto-restart) (Result: exit-code) since Sun
> > 2017-04-30 17
> > :39:08 UTC; 5ms ago
> >     Docs: man:systemd-sysv-generator(8)
> >  Process: 8747 ExecStart=/etc/init.d/apache2 start (code=exited,
> > status=1/FAILU
> > RE)
> >
> > Apr 30 17:39:08 systemd[1]: Failed to start LSB: Apache...
> > Apr 30 17:39:08 systemd[1]: apache2.service: Unit enter...
> > Apr 30 17:39:08 systemd[1]: apache2.service: Failed wit...
> > Hint: Some lines were ellipsized, use -l to show in full.
> > insserv: warning: current start runlevel(s) (empty) of script
> > `apache-htcachecle
> > an' overrides LSB defaults (2 3 4 5).
> > insserv: warning: current stop runlevel(s) (0 1 2 3 4 5 6) of script
> > `apache-htc
> > acheclean' overrides LSB defaults (0 1 6).
> > Processing triggers for systemd (229-4ubuntu17) ...
> > Processing triggers for ureadahead (0.100.0-19) ...
> > :~# apt-get install apache2=2.4.18-2ubuntu3.1
> > Reading package lists... Done
> > Building dependency tree
> > Reading state information... Done
> > Some packages could not be installed. This may mean that you have
> > requested an impossible situation or if you are using the unstable
> > distribution that some required packages have not yet been created
> > or been moved out of Incoming.
> > The following information may help to resolve the situation:
> >
> > The following packages have unmet dependencies:
> > apache2 : Depends: apache2-bin (= 2.4.18-2ubuntu3.1) but
> > 2.4.25-3+deb.sury.org~
> > xenial+1 is to be installed
> > ======================================================================================
> >
> >
> > ------------------------------------------------------------------------------
> > Check out the vibrant tech community on one of the world's most
> > engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> > -
> > Forwarded by the Webmin mailing list at 
> > web...@li...
> > To remove yourself from this list, go to
> > http://lists.sourceforge.net/lists/listinfo/webadmin-list 
> 
> 
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list

Re: [webmin-l] Apache2 down after package update

[Teknoskillz <tek...@co...>]

Gave up in solving this problem, and as per other recommendations, I will be 
trying Nigix out soon.

I notices that Webmin's built-in webserver , which is what we log into for 
the interface was not effected while Apache was down,
which was a great feature.

Since there is a movement away from apache to a degree, and I guess there is 
a Virtualmin module now for Nigix, would it be possible to use
Webmin's built-in webserver as a backup of some sorts in the event Apache 
goes down? Perhaps a monitor of some sorts could be devised?

Probably alot of work, but also would be nice if there was a redundancy 
where someone could select their primary as Apache or Nigix, and
if possible use Webmins server as the last resort.

I suppose Webmins http server cant do everything that Apache2 does, and some 
sites may not work 100%, but it sould at least help keep some sites
up that are only using plain http these days. I know they are few (myself 
included) but when this Apache2 problem hit, I was taken out of the search 
engines
and all http connections were refused.

Just some feedback and some thoughts for development to Jamie.


----- Original Message ----- 
From: "Teknoskillz" <tek...@co...>
To: "Webmin users list" <web...@li...>
Sent: Sunday, April 30, 2017 1:58 AM
Subject: Re: [webmin-l] Apache2 down after package update


>
> Thought I would try a rollback by doing:
>
> apt-get install apache2=2.4.18-2ubuntu3.1
>
> Turns out there are dependencies missing, so someone on another list
> sugguested:
>
>> The missing dependencies are probably apache2-data apache2-utils . Try
>> "apt-get install apache2 apache2-data apache2-utils"
>
>
> Tried that, seems like those go in and still it tries to put in apache
> 2.4.25 even after its purged? Like we arent allowed to use previous Apache
> versions anymore? Or is maybe the auto updater locking something
> so the new version is always referenced?
>
> =====================================================================================
> sudo apt-get --purge remove apache2
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
> The following packages were automatically installed and are no longer
> required:
>  apache2-data apache2-utils
> Use 'sudo apt autoremove' to remove them.
> The following packages will be REMOVED:
>  apache2*
> 0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
> After this operation, 514 kB disk space will be freed.
> Do you want to continue? [Y/n] y
> (Reading database ... 70372 files and directories currently installed.)
> Removing apache2 (2.4.25-3+deb.sury.org~xenial+1) ...
> Purging configuration files for apache2 (2.4.25-3+deb.sury.org~xenial+1) 
> ...
> dpkg: warning: while removing apache2, directory '/var/www/html' not empty
> so no
> t removed
> dpkg: warning: while removing apache2, directory
> '/etc/apache2/sites-enabled' no
> t empty so not removed
> dpkg: warning: while removing apache2, directory 
> '/etc/apache2/conf-enabled'
> not
> empty so not removed
> Processing triggers for man-db (2.7.5-1) ...
> :~# sudo apt-get autoremove
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
> The following packages will be REMOVED:
>  apache2-data apache2-utils
> 0 upgraded, 0 newly installed, 2 to remove and 0 not upgraded.
> After this operation, 1,203 kB disk space will be freed.
> Do you want to continue? [Y/n] y
> (Reading database ... 70164 files and directories currently installed.)
> Removing apache2-data (2.4.25-3+deb.sury.org~xenial+1) ...
> Removing apache2-utils (2.4.25-3+deb.sury.org~xenial+1) ...
> Processing triggers for man-db (2.7.5-1) ...
> ~# apt-get install apache2 apache2-data apache2-utils
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
> Suggested packages:
>  www-browser apache2-doc
> The following NEW packages will be installed:
>  apache2 apache2-data apache2-utils
> 0 upgraded, 3 newly installed, 0 to remove and 0 not upgraded.
> Need to get 0 B/462 kB of archives.
> After this operation, 1,717 kB of additional disk space will be used.
> Selecting previously unselected package apache2-utils.
> (Reading database ... 69850 files and directories currently installed.)
> Preparing to unpack
> .../apache2-utils_2.4.25-3+deb.sury.org~xenial+1_amd64.deb .
> ..
> Unpacking apache2-utils (2.4.25-3+deb.sury.org~xenial+1) ...
> Selecting previously unselected package apache2-data.
> Preparing to unpack 
> .../apache2-data_2.4.25-3+deb.sury.org~xenial+1_all.deb
> ...
> Unpacking apache2-data (2.4.25-3+deb.sury.org~xenial+1) ...
> Selecting previously unselected package apache2.
> Preparing to unpack .../apache2_2.4.25-3+deb.sury.org~xenial+1_amd64.deb 
> ...
> Unpacking apache2 (2.4.25-3+deb.sury.org~xenial+1) ...
> Processing triggers for man-db (2.7.5-1) ...
> Processing triggers for systemd (229-4ubuntu17) ...
> Processing triggers for ureadahead (0.100.0-19) ...
> Setting up apache2-utils (2.4.25-3+deb.sury.org~xenial+1) ...
> Setting up apache2-data (2.4.25-3+deb.sury.org~xenial+1) ...
> Setting up apache2 (2.4.25-3+deb.sury.org~xenial+1) ...
> Enabling module mpm_event.
> Enabling module authz_core.
> Enabling module authz_host.
> Enabling module authn_core.
> Enabling module auth_basic.
> Enabling module access_compat.
> Enabling module authn_file.
> Enabling module authz_user.
> Enabling module alias.
> Enabling module dir.
> Enabling module autoindex.
> Enabling module env.
> Enabling module mime.
> Enabling module negotiation.
> Enabling module setenvif.
> Enabling module filter.
> Enabling module deflate.
> Enabling module status.
> Enabling module reqtimeout.
> Enabling conf charset.
> Enabling conf localized-error-pages.
> Enabling conf other-vhosts-access-log.
> Enabling conf security.
> Enabling conf serve-cgi-bin.
> Enabling site 000-default.
> Job for apache2.service failed because the control process exited with 
> error
> cod
> e. See "systemctl status apache2.service" and "journalctl -xe" for 
> details.
> invoke-rc.d: initscript apache2, action "start" failed.
> ? apache2.service - LSB: Apache2 web server
>   Loaded: loaded (/etc/init.d/apache2; enabled; vendor preset: enabled)
>   Active: activating (auto-restart) (Result: exit-code) since Sun
> 2017-04-30 17
> :39:08 UTC; 5ms ago
>     Docs: man:systemd-sysv-generator(8)
>  Process: 8747 ExecStart=/etc/init.d/apache2 start (code=exited,
> status=1/FAILU
> RE)
>
> Apr 30 17:39:08 systemd[1]: Failed to start LSB: Apache...
> Apr 30 17:39:08 systemd[1]: apache2.service: Unit enter...
> Apr 30 17:39:08 systemd[1]: apache2.service: Failed wit...
> Hint: Some lines were ellipsized, use -l to show in full.
> insserv: warning: current start runlevel(s) (empty) of script
> `apache-htcachecle
> an' overrides LSB defaults (2 3 4 5).
> insserv: warning: current stop runlevel(s) (0 1 2 3 4 5 6) of script
> `apache-htc
> acheclean' overrides LSB defaults (0 1 6).
> Processing triggers for systemd (229-4ubuntu17) ...
> Processing triggers for ureadahead (0.100.0-19) ...
> :~# apt-get install apache2=2.4.18-2ubuntu3.1
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
> Some packages could not be installed. This may mean that you have
> requested an impossible situation or if you are using the unstable
> distribution that some required packages have not yet been created
> or been moved out of Incoming.
> The following information may help to resolve the situation:
>
> The following packages have unmet dependencies:
> apache2 : Depends: apache2-bin (= 2.4.18-2ubuntu3.1) but
> 2.4.25-3+deb.sury.org~
> xenial+1 is to be installed
> ======================================================================================
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -
> Forwarded by the Webmin mailing list at 
> web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list 

Re: [webmin-l] Let's Encrypt Issue

[John H. <web...@ew...>]

On 5/19/2017 2:22 PM, John Hinton wrote:
> I'm suddenly getting a lot of failures on cert updates today. Maybe I
> created a lot of new ones 2 months ago which might be why 'today'.
> Anyway, I can't seem to get any of these to update. It's on 2 different
> systems, one CentOS 6 and CentOS 7. Here is the error I'm getting:
>
> Parsing account key...
> Parsing CSR...
> Registering account...
> Traceback (most recent call last):
>     File "/usr/libexec/webmin/webmin/acme_tiny.py", line 235, in <module>
>       main(sys.argv[1:])
>     File "/usr/libexec/webmin/webmin/acme_tiny.py", line 231, in main
>       signed_crt = get_crt(args.account_key, args.csr, args.acme_dir,
> args.dns_hook, args.cleanup_hook, log=LOGGER, CA=args.ca)
>     File "/usr/libexec/webmin/webmin/acme_tiny.py", line 99, in get_crt
>       "agreement":
> "https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf",
>     File "/usr/libexec/webmin/webmin/acme_tiny.py", line 56, in
> _send_signed_request
>       protected["nonce"] = urlopen(CA + "/directory").headers['Replay-Nonce']
>     File "/usr/lib64/python2.7/urllib2.py", line 154, in urlopen
>       return opener.open(url, data, timeout)
>     File "/usr/lib64/python2.7/urllib2.py", line 437, in open
>       response = meth(req, response)
>     File "/usr/lib64/python2.7/urllib2.py", line 550, in http_response
>       'http', request, response, code, msg, hdrs)
>     File "/usr/lib64/python2.7/urllib2.py", line 475, in error
>       return self._call_chain(*args)
>     File "/usr/lib64/python2.7/urllib2.py", line 409, in _call_chain
>       result = func(*args)
>     File "/usr/lib64/python2.7/urllib2.py", line 558, in http_error_default
>       raise HTTPError(req.get_full_url(), code, msg, hdrs, fp)
> urllib2.HTTPError: HTTP Error 504: Gateway Time-out
>
> As the domain owners have no idea what these failure messages mean nor
> what to do about them, I have just finished going through all of the SSL
> virtservers on all of our systems and set the administrator address to
> myself. Otherwise, folks were getting 1 failure email every 5 minutes
> which... well, I'll leave that for you to translate. :)
>
> I have a few of requests:
>
> 1. I would love it if a different notification address could be used, so
> that other features for the domain owner could still be used, such as
> resending the sign up email to them instead of me.
>
> 2. Perhaps set the cert request time down to every 15 minutes? I've had
> in one situation where Let's Encrypt started failing due to too many
> failed attempts.
>
> (and here my thought process was interrupted by a phone call from a
> domain owner that started getting in her words, spammed by something and
> was scared of a serious problem)
>
> 3. If possible, it would be nice to have error info that was a bit more
> human readable. This one isn't a biggy, but I'm not sure what the above
> really means... what gateway timed out? My system? Their system? Or
> maybe due to some other problem?
>
> But hey, in spite of this, I'm very happy that this ability exist! It
> has made the process painless, until it doesn't work for some reason.
>
> Best,
> John Hinton
>
>
Apparently this was a problem on the LetsEncrypt end as it started 
working again. So, I guess the gateway failure was on them?

John

Re: [webmin-l] Authentic Theme Broken Again.

[Marcos R. <som...@gm...>]

Something similar happened to me... but after I closed the browser and
clean the cache... no problems.

Cheers!

Peace, with Justice!
Si, se puede!
Marcos

"For what can war, but endless war, still breed?" (John Milton)



On Fri, May 19, 2017 at 9:33 PM, Kimberly <kim...@gm...> wrote:

> The Authentic theme is broken again in PaleMoon after webmin upgrades.
> Now it asks me about leaving the page when I just visit a page and make
> no changes.  Also, it won't let me scroll to the top of the page.  The
> fun just never ends.
>
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -
> Forwarded by the Webmin mailing list at webadmin-list@lists.
> sourceforge.net
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>

[webmin-l] Authentic Theme Broken Again.

[Kimberly <kim...@gm...>]

The Authentic theme is broken again in PaleMoon after webmin upgrades.  
Now it asks me about leaving the page when I just visit a page and make 
no changes.  Also, it won't let me scroll to the top of the page.  The 
fun just never ends.

Re: [webmin-l] Let's Encrypt

[Kimberly <kim...@gm...>]

Looking at updates I see one for cert bot; so updating now.

On 5/19/2017 9:22 PM, Kimberly wrote:
> Certificates are not renewing; not attempting to renew.  Checking the
> cron jobs, I don't see a cron job that has anything to do with Let's
> Encrypt.
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -
> Forwarded by the Webmin mailing list at web...@li...
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>

[webmin-l] Let's Encrypt

[Kimberly <kim...@gm...>]

Certificates are not renewing; not attempting to renew.  Checking the 
cron jobs, I don't see a cron job that has anything to do with Let's 
Encrypt.