Latest microupdate breaks reconfiguration on some sites.

[HostaHost]

The new cgi wrapper patch microupdate seems to have broken some sites from reconfiguring if they're using fastcgi.

If you run: /usr/local/psa/admin/bin/httpdmng --reconfigure-domain DOMAIN

This big mess spits out:

PleskUtilException: '/usr/local/psa/admin/bin/apache-config' '-t' failed with code .

stdout:


stderr:
Syntax error on line 68 of /var/www/vhosts/DOMAIN/conf/13663158960.18549900_httpd_ip_default.include:
Wrapper .php cannot be accessed: (2)No such file or directory

file: /usr/local/psa/admin/plib/Service/Agent/Transport/Local/Exec.php
line: 71
code: 0
trace: #0 /usr/local/psa/admin/plib/Service/Agent/Transport/Local.php(58): Service_Agent_Transport_Local_Exec->process(6, Object(Service_Agent_Command_Exec), Object(Service_Agent_Log), Object(Service_Agent_Transport_LocalTransaction))
#1 /usr/local/psa/admin/plib/Service/Agent/Transport/Local.php(24): Service_Agent_Transport_Local->_command(6, Object(Service_Agent_Command_Exec), Object(Service_Agent_Transport_LocalTransaction), Object(Service_Agent_Log))
#2 /usr/local/psa/admin/plib/Service/Agent.php(133): Service_Agent_Transport_Local->process('ecf583e16826bf6...', Array, Object(Service_Agent_Log))
#3 /usr/local/psa/admin/plib/Template/Writer/Apache.php(58): Service_Agent->commit()
#4 /usr/local/psa/admin/plib/Template/Configuration/Applier.php(196): Template_Writer_Apache->test()
#5 /usr/local/psa/admin/plib/Template/Configuration/Applier.php(117): Template_Configuration_Applier->_applyConfigurationsToServiceNode(1, Array)
#6 /usr/local/psa/admin/plib/WebServerManager/Adapter/Apache.php(125): Template_Configuration_Applier->applyConfiguration(true)
#7 /usr/local/psa/admin/plib/WebServerManager/Adapter/Apache.php(408): WebServerManager_Adapter_Apache->sync()
#8 /usr/local/psa/admin/plib/WebServerManager.php(287): WebServerManager_Adapter_Apache->reconfVhost('DOMAIN', true)
#9 /usr/local/psa/admin/plib/api-common/Httpdmng.php(131): WebServerManager->reconfVhost('DOMAIN')
#10 /usr/local/psa/admin/sbin/httpdmng(13): Httpdmng->__construct()
#11 {main}

2013-04-18T16:11:39-04:00 ERR (3): Apache config (13663158960.18549900) generation failed: Syntax error on line 68 of /var/www/vhosts/DOMAIN/conf/13663158960.18549900_httpd_ip_default.include:
Wrapper .php cannot be accessed: (2)No such file or directory

Syntax error on line 68 of /var/www/vhosts/DOMAIN/conf/13663158960.18549900_httpd_ip_default.include:
Wrapper .php cannot be accessed: (2)No such file or directory

The problem with the include file is this:

FCGIWrapper .php

That is not valid, it is supposed to be:

FCGIWrapper /var/www/cgi-bin/cgi_wrapper/cgi_wrapper .php

Unfortunately I don't know where the bad information is coming from so I can fix the source template.

 

[HostaHost]

Looks like the missing value is supposed to be populated by /usr/local/psa/admin/conf/templates/default/service/php_over_fastcgi.php:

<IfModule mod_fcgid.c>
    <Files ~ (\.php)>
        SetHandler fcgid-script
        FCGIWrapper <?php echo $VAR->server->webserver->apache->phpCgiBin ?> .php
        Options +ExecCGI
        allow from all
    </Files>
</IfModule>

any idea where $VAR->server->webserver->apache->phpCgiBin comes from and why it is now wrong?

 

[HostaHost]

Found a very similar issue from Plesk 9.2 http://kb.parallels.com/en/6380

I tried the solution there, in this case adding "CGI_PHP_BIN /var/www/cgi-bin/cgi_wrapper/cgi_wrapper" to the file, didn't do anything.

 

[IgorG]

JFYI only psa-suexec binary has been changed in the latest security MUs for Plesk 10.x versions. Nothing more
You can see it here - http://autoinstall.plesk.com/PSA_10.4.4/microupdates/MU49/

 

[HostaHost]

I found the solution in this post where a previous micro update broke a site in the same way:

http://forum.parallels.com/showthre...lem-after-MU30&p=624507&viewfull=1#post624507

The fix (modified to not restart apache):

Please try to perform the following checks:
1) /usr/local/psa/admin/sbin/serverconf -l|grep CGI_PHP_BIN

The command should return full path to cgi_wrapper

The file should exist:
# ls -l /var/www/cgi-bin/cgi_wrapper/cgi_wrapper

-rwxr-xr-x 1 root root 3688 Nov 1 2011 /var/www/cgi-bin/cgi_wrapper/cgi_wrapper

2) mysql -uadmin -p`cat /etc/psa/.psa.shadow` psa -e "select value from ServiceNodeProperties where name like '%CGI_PHP_BIN%'";

Should return the same value

3) If result on previous step (2) is not correct try to resync server configuration in Plesk database:

mysql -uadmin -p`cat /etc/psa/.psa.shadow` psa -e "delete from ServiceNodeProperties where name='server.configuration.synced'"

4) Try to reconfigure web server:

/usr/local/psa/admin/bin/httpdmng --reconfigure-all -no-restart

I have doubts as to whether all the microupdate does is copy a file in place; there is a very long pause while it's applying that microupdate so it's either doing something else or sleeping for a few minutes for no particular reason.

 

[Faris Raouf]

The MU update process re-applies previous patches (either all the time or if it thinks they may not be installed).

For example, if you use qmail-scanner, it will be disabled (until you reinstall it) because a previous MU involved something to do with mail and bit of qmail gets reinstalled.

Similarly, if you use the ART psa-proftpd, it gets overwritten by the latest Parallels-provided version.

So the pause may just be something or other being checked or re-updated (a sensible precaution for the MU system to do, but it has unwanted side-effects if you aren't sticking to "stock" Plesk).