Issue Disable SSL for webmail

[bobtukin]

I installed the letsencrypt extension and set it up for a domain. I was able to browse to https://domain.com I then started having issues with webmail.domain.com it shows the default plesk page for all of my webmail pages. Can't access webmail for about 12 websites.

I think it started with me enabling "enable ssl for webmail", or something similar.

My question is, how do i completely remove the "enable ssl for webmail"? I have already deleted the ssl cert and removed it from the domain, but still can't access webmail. I have tried reinstalling Roundcube.

And also tried the following:
/usr/local/psa/admin/sbin/httpdmng --reconfigure-domain <_your_domain_name_>
and
plesk repair ASPECT [OPTION] (tried many options, didn't find any issues.)

Latest version of Plesk and all updates applied.

 

[Bitpalast]

Does the file /etc/httpd/conf.d/zz010_psa_httpd.conf include this line:
IncludeOptional '/etc/httpd/conf/plesk.conf.d/webmails/*.conf'
?

 

[bobtukin]

Yes it does.

 

[Bitpalast]

Could you please pick one domain for that webmail does not work and verify this:
- Check in /etc/httpd/conf/plesk.conf.d/webmails if it contains a file named domain.tld_webmail.conf (domain.tld replaced by the domain name you have chosen).
- If the file exists, please look inside. In the virtual host sections it has a DocumentRoot directive. The document root should point to either /usr/share/psa-roundcube or /usr/share/psa-horde. Does it?
- If the directive is there, please verify that in the document root path (e.g. /usr/share/psa-roundcube) the installation of the webmail software can be found and has an index.php file.
- Verify that /psa-roundcube and /psa-horde that are deriving from /usr/share have permissions 755 and are owned by root, group root.

 

[bobtukin]

Document Root points to roundcube. The index.php is there. Attached is the image of permissions. Everything looks correct to me.

 

[Bitpalast]

As an additional approach you can try to re-register webmail with the panel. Use the following chain of commands to first remove an existing configuration, then reinstall it, enable it and then reconfigure all domains to include the new webmail installation:
# /usr/local/psa/admin/bin/webmailmng --remove --name=roundcube
# /usr/local/psa/admin/bin/webmailmng --install --name=roundcube
# /usr/local/psa/admin/bin/webmailmng --enable --name=roundcube
and finally reconfigure domains again:
# /usr/local/psa/admin/sbin/httpdmng --reconfigure-all

 

[bobtukin]

Will reconfiguring delete all email users and their mail?

 

[Bitpalast]

Oh, and I forgot the most simple solution: In the Mail settings where the webmail client for a domain can be selected, please make sure that this is not set to "None", else Apache default page would also be shown.

 

[Bitpalast]

Will reconfiguring delete all email users and their mail?

No, this will not delete any mailboxes, nor the mail. Webmail can be seen as a "window" through which you look into mailboxes. Mailboxes are not touched by changing a webmail installation. As far as I know, the webmail management commands do not remove the software itself, but only update the configuration of Plesk to include or not to include a webmail package.

 

[bobtukin]

I have successfully ran the commands above to rebuild. Still not working. And verified that correct webmail client is set for domain. Any other ideas? I'm almost positive this stems from me clicking on "secure webmail for this domain" or something like that in the new Onyx dashboard. I have disabled ssl after that on everything I can find, but still no luck. I'm wondering if there could be some rewrite rule left over somewhere. How would I complete undo the "secure webmail for this domain"?

 

[Bitpalast]

I don't think there is an option "secure webmail for this domain" (I have not found it at least, where did you see that option???), neither would I know why the Apache default page is displayed because a domain is addressed by https:// instead of http://, because the configuration files include both ports. It would be great to find that out, though.

Further idea, because almost all other reasons have already been ruled out: Maybe the DNS configuration is pointing the webmail.* subdomains to another IP address than the regular main domains, so that the request never reaches the correct server and you are not seeing a default page of this server, but another one? Maybe your server is using different IP addresses, one for the host, another one for its subscriptions?

Beyond that, I am out of ideas. Sorry.

 

[bobtukin]

DNS is correct and pointing to the correct domain. In the SSL-TLC Certificates for the domain, I get a box that says Secure Webmail.

 

[Bitpalast]

Ah, I see. Never noticed that before. Still don't think it can be a cause, because when you look into the webmail configuration files, they include virtual host sections for encrypted and non-encrypted traffic. The only difference is that they are using the default, self-signed certificate and not a specific domain certificate. If there was a problem with a certificate file or configuration, a webserver restart would fail, rendering the web service inactive.

Hopefully another forum user will come up with a bright solution.

 

[TomBoB]

Agree with Peter, his steps should really have sorted it.

You could try one more drastic measure. Go to Settings-Tools, updates & upgrades, add features, and load Horde *in addition* to roundcube, so you got both available.

Than in the mail section of the domain that gives trouble, switch to Horde as the webmail client, and after that switch back to roundcube. Did the trick for me a long while back.
This way it re-creates the proper configuration files needed. Just in case they went corrupt somehow.
After that uninstall the not needed webmail software if you like.

Hope it helps.
Tom