Change Service Plan, settings conflict with server-wide security policy.

[Bjorn]

Operating system: CentOS 7
Odin - Product: Plesk 12.5.3
Installed mailserver: postfix / courier-imap

Hi,

After upgrading to Plesk 12.5.3, I get a settings conflict message when trying to change the Service Plan settings.
See: http://enjoyitwebdesign.nl/security-conflict.jpg

The following settings conflict with the policy: "Undefined" ??? --> Not very helpfull :/

This message only shows for the Service Plans that are created for 1 reseller.
We have another Reseller with almost identical Plans, I can update them without problems??
Both Resellers have the same Reseller Plan.

I cross checked the plans, but I can't find anything different.
I did try clicking 'apply secure settings preset', this only changes the SSH access path (which is not active)..

How can I find the setting that is conflicting?

Note: I also installed Fail2Ban today, and changed a few server settings, so I don't know if this has something to do with the Plesk upgrade.

Thanks.

Regards,
Bjorn

 

[IgorG]

Show me please content of /usr/local/psa/admin/conf/site_isolation_settings.ini file?

 

[Bjorn]

Here it is:

;; The section describes allowed hosting options
[hosting]
;php = any
;php_handler_type = fastcgi
;python = off
;perl = off
;fastcgi = any
;miva = off
;ssi = any
;ssl = any
;shell = /usr/local/psa/bin/chrootsh
;asp = any
;php_safe_mode = on
;coldfusion = off

 

[IgorG]

Any related error messages in /usr/local/psa/admin/logs/panel.log ?

 

[Bjorn]

Here are the records from yesterday:


[2015-11-18 14:39:37] ERR [panel] Module context is not defined.
[2015-11-18 14:42:02] ERR [util_exec] proc_close() failed
[2015-11-18 14:42:03] ERR [panel] [Error] unrecognised option '--no-sdf'

 

[IgorG]

'--no-sdf' was an hidden option of /usr/local/psa/admin/sbin/php_handlers_control in Plesk 11.5 and Plesk 12.0 version but there is no this option for this utility in Plesk 12.5
For example:

[root@ppu12-0 ~]# /usr/local/psa/admin/sbin/php_handlers_control --reread --no-sdf
[root@ppu12-0 ~]#

[root@ppu12-5 ~]# /usr/local/psa/admin/sbin/php_handlers_control --reread --no-sdf
[Error] unrecognised option '--no-sdf'

I suppose that you have uncompleted successfully upgrade. I'd suggest you try to fix it with

# plesk repair installation

or maybe with other options for repair utility.

 

[Bjorn]

Hi,

Btw, thanks for helping me IgorG

I've run the repair installation. Checked log file, and all is ok.
Just noticed our phpmailer forms are not sending. Do you know where to check or how to repair?

 

[IgorG]

Just noticed our phpmailer forms are not sending. Do you know where to check or how to repair?

What sort of related errors do you have exactly in maillog?

 

[Bjorn]

None
Only some failed login attempts this morning 03:54

 

[IgorG]

Do you have enabled "Allow scripts and users to use Sendmail" option? More detail here - http://download1.parallels.com/Plesk/Doc/en-US/online/plesk-administrator-guide/73368.htm