• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion

Does enhanced security mode break migration manager?

HostaHost

Regular Pleskian
Just attempted a migration from a Plesk 11.0.9 (centos 5 i386/pae) to Plesk 11.0.9 (centos 6 x86_64) and it failed horribly; passwords for ftp accounts weren't set, mail accounts weren't set, database users weren't created so therefore the database data wasn't copied, none of the websites' content were copied, none of the mail users' email was copied, etc.. I believe this is the first migration we've attempted from 11 to 11 with enhanced security mode enabled. Example issues:

1) ERROR: () Cannot encrypt dump file (ErrorCode: 255, STDOUT: ) [Error:]

2) ERROR: () Execution of /usr/local/psa/admin/plib/api-cli/ipmanage.php -u 1.2.3.4 -ssl_certificate_ref cae1e3a03e697ac88724d8c7e97a7213 -ignore-nonexistent-options failed with return code 1.
Stderr is Certificate does not exist.

This error has of course existed for years now ever since Plesk 10 came out. It has never correctly migrated SSL certificates. We've created threads on it, bug reports, support tickets, etc. and it's still broken.

3) None of the email accounts got created:

ERROR: (domain object 'domain.com') Failed deployment of mail user [email protected]
ERROR: () Execution of /usr/local/psa/admin/plib/api-cli/mail.php --create [email protected] -passwd '' -passwd_type sym -mailbox true -ignore-nonexistent-options failed with return code 1.
Stderr is
An error occured during mailname creation: Can't create mailname:
Wrong syntax for command's '-passwd' parameter.

Obviously the value for password should not be empty, it should be something that starts with $AES-128-CBC$, so does this mean the migration manager is not correctly escaping the password string and trying to convert $AES-128-CBC into a variable substitution?

4) Site deployments failed:

ERROR: (domain object 'domain.com') Execution of /usr/local/psa/admin/plib/api-cli/domain.php --update domain.com -guid ea9e4c54-c6f5-4ec7-ae49-b838e6b7ca79 -vendor-guid 9f7a8df9-75df-4bed-9bbc-a11c45256214 -creation-date 2010-11-11 -hosting true -hst_type phys -do-not-apply-skeleton -ip 1.2.3.4 -www-root httpdocs -login USER -passwd '' -passwd_type sym -ignore-nonexistent-options failed with return code 1.
Stderr is
Wrong syntax for command's '-passwd' parameter.

5) Databases:

ERROR: (domain object 'domain.com') Failed deployment of database dbname (domain domain.com)
ERROR: () Unable to deploy database content. Please try to restore it manually from the archive clients/clientname/domains/domain.com/databases/dbname_1[sqldump]: backup_clientname_dbname_1306171313.tgz,
Execution of /usr/bin/mysql --no-defaults -u dbuser -h localhost -P 3306 dbname failed with return code 1.
Stdin is
source /tmp/migration-unpack-QPdLO2/backup_clientname_dbname_1_1306171313;
exit
Stderr is
ERROR 1045 (28000): Access denied for user 'dbuser'@'localhost' (using password: YES)
 

The error is occurring with the Parallels Migration and Transfer Manager in Plesk, not from a backup I have created using the backup manager. The server in question does not have enough free space to use the backup system since either local or remote involve creating a tar file of the entire site. With that being the case, I need a solution for using the Migration and Transfer Manager to move a site from one server to another where enhanced security is enabled. It uses rsync, which eliminates the disk space issue, but in this case it breaks everything because of the password issue so nothing is actually moved and everything would need to be recreated from scratch, which is not really what I want to do.
 
The cause of this problem was not having 'Backup Manager' installed on the source server. Apparently when enhanced security mode is in use, some component of backup manager is required for migration manager to correctly copy passwords.
 
Back
Top