• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion

Error enabling Enhanced security mode

brianmc

New Pleskian
We've just upgraded from 10.4.4 to 11.0.9, and the home screen of Plesk recommends turning on Enhanced Security Mode. However, when doing this, I get an error:

Error: copy_file failed: copy_file: System Error: invalid file paths in /webhosting/psa-state/psa/admin/bin/copy_file: /webhosting/psa-state/psa/tmp/nsfDcsCMq /etc/psa/.psa.shadow

I looked at http://kb.parallels.com/en/5201 and discovered we had a symlink: /opt/psa/ -> /webhosting/psa-state/

Following the KB article, I replaced this with the 'real' directory in /etc/psa/psa.conf and /webhosting/psa-state/psa/admin/conf/php.ini (httpsd.conf does not exist). I then stopped and started Plesk.

However, I still have the same error, and plenty of references through the Plesk dir to the original /opt/psa. Is there anywhere else in Plesk v11 that I need to update this reference? Or a reconfiguration tool that I need to run?

Thanks.
 
I had not, but I have now. It mostly says everything is already there. There are a couple of errors related to services that we use to log on to the server, but I see no reason why they should cause any problems. The error is still occurring.

/psa/bootstrapper/pp11.0.9-bootstrapper# ./bootstrapper.sh repair
===> Preparing upgrade
Stopping psa... done
psa is stopped
Stopping psa... done
===> Cumulative database upgrade has been started
===> Upgrade completed.
CRITICAL:4:some functionality isn't yet implemented (NotImplementedError: service su includes two or more common services at once: set(['tacacs-auth', 'common-auth']))

**** Product repair started.

===> Checking for previous installation ... found.
Create user 'psaadm' and group 'psaadm'
Checking for the group 'psaadm'...
Group 'psaadm' already exists

Checking for the user 'psaadm'...
User 'psaadm' already exists

Create group swkey-data
Checking for the group 'swkey-data'...
Group 'swkey-data' already exists

Checking for the group 'swkey-data'...
Trying to add supplementary group 'swkey-data' for user 'psaadm'... already there
Create Mail accounts
Checking for the group 'popuser'...
Group 'popuser' already exists

Checking for the user 'popuser'...
User 'popuser' already exists

Checking for the user 'mhandlers-user'...
User 'mhandlers-user' already exists

Trying to got legacy variables... done
config updated
===> Updated /etc/psa/psa.conf
Trying to save legacy variables... done
Checking for the system groups and users necessary for ftp server...
Checking for the group 'psaftp'...
Group 'psaftp' already exists

Checking for the user 'psaftp'...
User 'psaftp' already exists


Checking for the system groups and users necessary for Apache...
Checking for the group 'www-data'...
Group 'www-data' already exists

Checking for the user 'www-data'...
User 'www-data' already exists


===> Checking for the necessary system accounts
Checking for the system groups and users necessary for MySQL...
Checking for the group 'mysql'...
Group 'mysql' already exists

Checking for the user 'mysql'...
User 'mysql' already exists

Checking for the system groups and users necessary for admin server...
Checking for the group 'psaadm'...
Group 'psaadm' already exists

Checking for the user 'psaadm'...
User 'psaadm' already exists

Checking for the group 'psaserv'...
Group 'psaserv' already exists

Checking for the group 'psaserv'...
Trying to add supplementary group 'psaserv' for user 'www-data'... already there
Checking for the group 'psaserv'...
Trying to add supplementary group 'psaserv' for user 'psaftp'... already there
Checking for the group 'psaserv'...
Trying to add supplementary group 'psaserv' for user 'psaadm'... already there
Checking for the group 'psacln'...
Group 'psacln' already exists

Trying to start service mysql... /usr/sbin/mysqld (pid 31923) is running...
done
Trying to establish test connection... connected
done
Trying to backup MySQL database... done
MySQL databases are dumped to /var/lib/psa/dumps/mysql.preupgrade.11.0.9-11.0.9.20120904-102851.dump.gz
Checking that /webhosting/psa-state/psa/bin/chrootsh registered as login shell...

Create PPSB support group
Checking for the group 'psasb'...
Group 'psasb' already exists

Checking for the group 'psasb'...
Trying to add supplementary group 'psasb' for user 'psaadm'... already there
Checking for the group 'psasb'...
Trying to add supplementary group 'psasb' for user 'www-data'... already there

===> Performing safe prep-install database actions


===> Upgrading database

Trying to start service mysql... /usr/sbin/mysqld (pid 31923) is running...
done
Trying to establish test connection... connected
done
Trying to find psa database... version is 011009
Version is OK, no need to create psa database.
Trying to backup MySQL database... done
MySQL databases are dumped to /var/lib/psa/dumps/mysql.preupgrade.11.0.9-11.0.9.20120904-102854.dump.gz
no upgrade from 80
no upgrade from 81
no upgrade from 82
no upgrade from 83
no upgrade from 84
no upgrade from 86
no upgrade from 90
no upgrade from 92
no upgrade from 93
no upgrade from 95
no upgrade from 100
no upgrade from 101
no upgrade from 107
no upgrade from 108
no upgrade from 109
no upgrade from 1010
no upgrade from 1011
no upgrade from 1012
no upgrade from 1013
no upgrade from 1100
Trying to set psa database version to 011009... Warning: there are no bootstrapper prep_install actions for component 'horde'
Trying to generate default psa SSL Certificate... default certificate already exists
done
Trying to add header to file /etc/awstats/awstats.model.conf... file /etc/awstats/awstats.model.conf already contains required header
Trying to install PAM module... PAM configuration loaded from (directory="/etc/pam.d", file="/etc/pam.conf"). Configuration contains 25 file(s)
4:some functionality isn't yet implemented (NotImplementedError: service su includes two or more common services at once: set(['tacacs-auth', 'common-auth']))

WARNING!
Some problems are found during install PAM module not successed(see log file: /tmp/plesk_11.0.9_installation.log)

Continue...

System start/stop links for /etc/init.d/xinetd already exist.
System start/stop links for /etc/init.d/xinetd already exist.
Module ssl already enabled
Module headers already enabled
ln: creating symbolic link `/var/named/run-root/etc/bind/rndc.conf': File exists
update-rc.d: /etc/init.d/named: file does not exist
mknod: `/var/www/vhosts/chroot/dev/null': File exists
Module suexec already enabled
Module include already enabled
Module rewrite already enabled
Module userdir already enabled
===> Cumulative upgrade has been started
===> Upgrade completed.
Module dav already enabled
Considering dependency dav for dav_fs:
Module dav already enabled
Module dav_fs already enabled
Module auth_digest already enabled
Module authz_user already enabled
Module dav_lock already enabled
update-rc.d: warning: psa start runlevel arguments (2 3 4 5) do not match LSB Default-Start values (2 3 5)
System start/stop links for /etc/init.d/psa already exist.
Stopping psa... done
Starting xinetd service... done
Starting mysql service... done
Starting bind9 service... done
Starting postgresql service... not installed
Starting psa-spamassassin service... done
Plesk: Starting Mail Server... already started
Starting psa... done
Starting drwebd service... failed

Congratulations!
All stages of the upgrade were successful.
psa is now running on your system.
To complete the system configuration process, please proceed to URL:
https://XX.XX.XX:8443/ or
https://XX.XX.XX.XX:8443/
Use 'admin' and '<YOUR ADMIN PASSWORD>' as login name and password.

Further, use the following commands to start and stop the system:
/etc/init.d/psa start and
/etc/init.d/psa stop respectively.

4:some functionality isn't yet implemented (NotImplementedError: service su includes two or more common services at once: set(['tacacs-auth', 'common-auth']))
 
Last edited:
Any other suggestions, or this something I need to report to support?

It's also preventing our customers from viewing their logs:

copy_file: System Error: invalid file paths in /webhosting/psa-state/psa/admin/bin/copy_file: /var/www/vhosts/XX.XX.XX/statistics/logs/error_log
 
Back
Top