• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Issue No webmail login possible after upgrading to Onyx

Klaus Parzinger

New Pleskian
Hi folks,

yesterday i upgraded my Plesk to Onyx and now i can`t login to any webmail service:
Horde: Error connecting to mail server.

I spent my last 5 hours in reading and trying several solutions. My status:
- Disabled IPv6 on hosts
- Disalbed IPv6 in dovecot config
- Checked Telnet --> Fail (later)
- Upgraded Distribution, Updated all packages to stable versions

Code:
root@kproot:/home/trauni# telnet localhost 143
Trying 127.0.0.1...
telnet: Unable to connect to remote host: Connection timed out

on tcpdump:

Code:
tcpdump port 143 -v
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
21:09:07.032093 IP (tos 0x10, ttl 64, id 20153, offset 0, flags [DF], proto TCP (6), length 60)
    kproot.traunisserver.de.56585 > localhost.imap2: Flags [S], cksum 0x103d (incorrect -> 0xfef7), seq 1930376439, win 14600, options [mss 1460,sackOK,TS val 293454 ecr 0,nop,wscale 7], length 0
21:09:08.031228 IP (tos 0x10, ttl 64, id 20154, offset 0, flags [DF], proto TCP (6), length 60)
    kproot.traunisserver.de.56585 > localhost.imap2: Flags [S], cksum 0x103d (incorrect -> 0xfdfd), seq 1930376439, win 14600, options [mss 1460,sackOK,TS val 293704 ecr 0,nop,wscale 7], length 0
21:09:10.035221 IP (tos 0x10, ttl 64, id 20155, offset 0, flags [DF], proto TCP (6), length 60)
    kproot.traunisserver.de.56585 > localhost.imap2: Flags [S], cksum 0x103d (incorrect -> 0xfc08), seq 1930376439, win 14600, options [mss 1460,sackOK,TS val 294205 ecr 0,nop,wscale 7], length 0
21:09:14.047294 IP (tos 0x10, ttl 64, id 20156, offset 0, flags [DF], proto TCP (6), length 60)
    kproot.traunisserver.de.56585 > localhost.imap2: Flags [S], cksum 0x103d (incorrect -> 0xf81d), seq 1930376439, win 14600, options [mss 1460,sackOK,TS val 295208 ecr 0,nop,wscale 7], length 0
21:09:22.063223 IP (tos 0x10, ttl 64, id 20157, offset 0, flags [DF], proto TCP (6), length 60)
    kproot.traunisserver.de.56585 > localhost.imap2: Flags [S], cksum 0x103d (incorrect -> 0xf049), seq 1930376439, win 14600, options [mss 1460,sackOK,TS val 297212 ecr 0,nop,wscale 7], length 0
21:09:38.079235 IP (tos 0x10, ttl 64, id 20158, offset 0, flags [DF], proto TCP (6), length 60)
    kproot.traunisserver.de.56585 > localhost.imap2: Flags [S], cksum 0x103d (incorrect -> 0xe0a5), seq 1930376439, win 14600, options [mss 1460,sackOK,TS val 301216 ecr 0,nop,wscale 7], length 0
^C
6 packets captured
6 packets received by filter
0 packets dropped by kernel

Hosts

Code:
cat /etc/hosts
127.0.0.1     localhost localhost4
##::1         localhost localhost.localdomain localhost6 localhost6.localdomain6

88.198.56.71    kproot.traunisserver.de kproot

Telnet from my home location to the root (Hetzner)

Code:
* OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA AUTH=CRAM-MD5 AUTH=CRAM-SHA1 AUTH=CRAM-SHA256 AUTH=PLAIN IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2015 Double Precision, Inc.  See COPYING for distribution information.

I tried courier and dovecot.
On Dovecot i deactivated IPv6 (listen = *) and also its not shown up in netstat

Code:
 netstat -tulpen | egrep 'tcp6|udp6'
tcp6       0      0 :::37                   :::*                    LISTEN      0          11181       4218/sshd     
tcp6       0      0 :::106                  :::*                    LISTEN      0          4713        3980/xinetd   
tcp6       0      0 :::139                  :::*                    LISTEN      0          10769       3066/smbd     
tcp6       0      0 :::21                   :::*                    LISTEN      0          4712        3980/xinetd   
tcp6       0      0 :::53                   :::*                    LISTEN      107        10707       2972/named   
tcp6       0      0 :::445                  :::*                    LISTEN      0          10767       3066/smbd     
tcp6       0      0 :::8447                 :::*                    LISTEN      0          12837       4866/autoinstaller
udp6       0      0 :::53                   :::*                                107        10706       2972/named   
udp6       0      0 :::123                  :::*                                0          7623        3524/ntpd

and dovecot is listen on tcp

Code:
 netstat -tulpen | egrep 'tcp|udp'
tcp        0      0 0.0.0.0:37              0.0.0.0:*               LISTEN      0          11183       4218/sshd     
tcp        0      0 0.0.0.0:3306            0.0.0.0:*               LISTEN      105        11005       3477/mysqld   
tcp        0      0 0.0.0.0:587             0.0.0.0:*               LISTEN      0          4716        3980/xinetd   
tcp        0      0 0.0.0.0:139             0.0.0.0:*               LISTEN      0          10773       3066/smbd     
tcp        0      0 0.0.0.0:110             0.0.0.0:*               LISTEN      0          25601       9398/dovecot 
tcp        0      0 0.0.0.0:143             0.0.0.0:*               LISTEN      0          25637       9398/dovecot

But I haven`t any idea or clue whats going on..... i really dont know... somebody can help?


Best
 
root@kproot:/home/trauni# telnet localhost 143 Trying 127.0.0.1... telnet: Unable to connect to remote host: Connection timed out
The problem in that IMAP service is not started. Check 143 port with

# lsof -i tcp:143
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
dovecot 961 root 39u IPv4 42334776 0t0 TCP *:imap (LISTEN)
dovecot 961 root 40u IPv6 42334777 0t0 TCP *:imap (LISTEN)

as you can see dovecot(IMAP) service is up and listening on my test server.
 
Hi Klaus Parzinger,

I'm a bit surprised about your steps to investigate issues with webmail, because only the last one is ( partly ) relevant to the webmail - service ( horde/roundcube ).
Even that @IgorG mentioned that dovecot might not have been started, I can see "Dovecot ready" on port 143.

Pls. consider to investigate the corresponding error - logs from horde/roundcube and make sure, that both webserver - services ( apache + nginx ) are running ( if not, pls. check here as well the corresponding logs, please )


Due to the fact, that I see the standard Plesk site, when opening "webmail.traunisserver.de", I rather think, that you might have issues with your webserver - configuration files. Pls. consider to re-create them with the command:

plesk repair web -y -v

... and note, that each Plesk - repair - process creates as well a log - file, which you can reach at "/var/log/plesk".
 
Hi, i already checked apache and nginx. All my services (except webmail) looking fine. All webpages are running, alls sql databases are running. I can send and receive mails via SMTP and IMAP and POP3 on my Outlook. Only the webmail is not working.

The reason why you only see the default site is: I just deactivated "webmail.traunisserver.de" because it was running simultaneously to webmail.auto-hifi-lindner.com with an roundcube webmail service just to check if the error occurs on both webmail services. And yes it does. If you check "webmail.auto-hifi-lindner.com" you will see the horde webmailer. I tried to fix the trouble on my own domain and not on the costumer domain.

Code:
root     21075  0.0  0.0   7776   848 pts/1    R+   18:02   0:00 grep nginx
root     10678  0.0  0.0 337116 23932 ?        SNs  00:10   0:02 /usr/sbin/apache2 -k start
www-data 10681  0.0  0.0 165252  7040 ?        SN   00:10   0:00 /usr/sbin/apache2 -k start
www-data 18781  0.0  0.0 337148 10836 ?        SN   17:50   0:00 /usr/sbin/apache2 -k start
www-data 20134  0.0  0.0 337148 10836 ?        SN   17:57   0:00 /usr/sbin/apache2 -k start
www-data 20138  0.0  0.0 337148 10836 ?        SN   17:57   0:00 /usr/sbin/apache2 -k start
www-data 20139  0.0  0.0 337148 10836 ?        SN   17:57   0:00 /usr/sbin/apache2 -k start
www-data 20782  0.0  0.0 337148 10836 ?        SN   18:01   0:00 /usr/sbin/apache2 -k start
root     21336  0.0  0.0   7776   852 pts/1    R+   18:04   0:00 grep apache
root      9398  0.0  0.0  22216  1456 ?        Ss   Dec12   0:00 /usr/sbin/dovecot -c /etc/dovecot/dovecot.conf
dovecot   9416  0.0  0.0  13612  1176 ?        S    Dec12   0:00 dovecot/anvil
root      9417  0.0  0.0  13744  1376 ?        S    Dec12   0:00 dovecot/log
root     16802  0.0  0.0  13608  1112 ?        S    17:39   0:00 dovecot/ssl-params
root     21411  0.0  0.0   7780   852 pts/1    R+   18:04   0:00 grep dovecot
root     21511  0.0  0.0   7776   852 pts/1    S+   18:05   0:00 grep horde

in the log file of hore (psa-horde) i can find this error:
Code:
2016-12-13T06:35:18+00:00 ERR: HORDE [horde] FAILED LOGIN for <[email protected]> (<[email protected]>) [87.157.249.25] to horde [pid 1206 on line 216 of "/usr/share/psa-horde/login.php"]
An if i searching for it i find the hint to the IPv6 troubles but IPv6 is already deactivated in hosts (as routing) and also explizit in dovecot (via listen = *).

Totally new error since today (i swear yesterday it wasnt there) i got "Upgrade failed" on start page of Plesk Admin Panel on trying to repair this is shown up:

Code:
Internal error ;-P
ERROR: Zend_Db_Adapter_Exception: SQLSTATE[HY000] [2002] No such file or directory (Abstract.php:144)<br />
<br><a href='http://kb.plesk.com/plesk-error/search?metaId=1751d5edcca5340f78144a4499e8c1d5&messageId=2eb8d2699e722503bf79ae1c7819dc4e&file=Abstract.php&line=144&type=Zend_Db_Adapter_Exception&version=17.0.17&message=SQLSTATE%5BHY%5D+%5B%5D+No+such+file+or+directory' target='_blank'>Search for related Knowledge Base articles</a><script></script><p>ERROR: Uncaught exception 'PDOException' with message 'SQLSTATE[HY000] [2002] No such file or directory' in /opt/psa/admin/externals/Zend/Db/Adapter/Pdo/Abstract.php:129
Stack trace:
#0 /opt/psa/admin/externals/Zend/Db/Adapter/Pdo/Abstract.php(129): PDO->__construct('mysql:dbname=ps...', 'admin', '$AES-128-CBC$Fh...', Array)
#1 /opt/psa/admin/externals/Zend/Db/Adapter/Pdo/Mysql.php(111): Zend_Db_Adapter_Pdo_Abstract->_connect()
#2 /opt/psa/admin/externals/Zend/Db/Adapter/Abstract.php(460): Zend_Db_Adapter_Pdo_Mysql->_connect()
#3 /opt/psa/admin/externals/Zend/Db/Adapter/Pdo/Abstract.php(238): Zend_Db_Adapter_Abstract->query('select param, v...', Array)
#4 /opt/psa/admin/plib/Db/Adapter/Pdo/Mysql.php(30): Zend_Db_Adapter_Pdo_Abstract->query('select param, v...', Array)
#5 /opt/psa/admin/plib/db.php(36): Db_Adapter_Pdo_Mysql->query('select param, v...')
#6 /opt/psa/admin/plib/db.php(212): db_query('select param, v...', false)
#7 /opt/psa/admin/plib/Plesk/Mode.php(423): get_param('disable_provisi...')
#8 /opt/psa/admin (Abstract.php:144)<br><br><a href='http://kb.plesk.com/plesk-error/search?metaId=0b20aabbd825d0a69fd31706678e2963&messageId=36af65c077c621ab5c8384a4167f1331&file=Abstract.php&line=144&type=Error&version=17.0.17&message=Uncaught+exception++with+message+%22SQLSTATE%5BHY%5D+%5B%5D+No+such+file+or+directory%22+in+%2Fpath%2FAbstract.php%28%29%3A+Zend_Db_Adap' target='_blank'>Search for related Knowledge Base articles</a></p>

Im not the php and sql coder and i cant interpret all this error psa messages correctly but i think the main sql database from plesk is damaged?

#Funny Fact: The message disappears after refreshing the webpage....
 
Hi Klaus Parzinger.

pls. consider to repair MORE with the example commands:

plesk repair installation -y -v

OR/AND

plesk repair all -y -v


Pls. be informed, that EACH repair process creates as well a corresponding log - file at "/var/log/plesk".

Since your latest upgrade seems to unfinished, consider as well to use:

plesk installer --select-product-id plesk --select-release-current --reinstall-patch --install-component base
 
plesk repair all -y -v
Error messages: 4; Warnings: 4; Errors resolved: 2
Code:
[2016-12-13 20:01:54] - W: GPG error: http://download.opensuse.org  Release: The
[2016-12-13 20:01:54] following signatures couldn't be verified because the public
[2016-12-13 20:01:54] key is not available: NO_PUBKEY 4ABE1AC7557BEFF9
[2016-12-13 20:01:54] Repairing incorrect permissions .................................
[2016-12-13 20:02:04] [FAILED]
[2016-12-13 20:02:04] - W: GPG error: http://download.opensuse.org  Release: The
[2016-12-13 20:02:04] following signatures couldn't be verified because the public
[2016-12-13 20:02:04] key is not available: NO_PUBKEY 4ABE1AC7557BEFF9

I also found another strange thing, I checked for updates on Plesk and found that one update couldn`t be installed because PostgreSQL could not be configured. I checked PostgreSQL and found that PostgreSQL is not able to start.

Code:
 The PostgreSQL server failed to start. Please check the log output: 2016-12-13 20:18:53 CET LOG: could not bind IPv4 socket: Cannot assign requested address

Code:
[....] Starting PostgreSQL 9.1 database server: main[....] The PostgreSQL server failed to start. Please check the log output: 2016-12-13 20:18:53 CET LOG: could not bind IPv4 socket: Cannot assign requested address 2016-12-13 20:18:53 CET HINT: Is another postmaster already running on port 5432? If not, wait a few seconds and retry. 2016-12-13 20:18:53 CET WARNING: could not create listen socket for "localhost" 2016-12-13 20:18:53 CET FATAL: could not create any TCP/IP[FAILets ... failed!
 failed!
invoke-rc.d: initscript postgresql, action "start" failed.
dpkg: error processing postgresql-9.1 (--configure):
 subprocess installed post-installation script returned error exit status 1
dpkg: dependency problems prevent configuration of postgresql:
 postgresql depends on postgresql-9.1; however:
  Package postgresql-9.1 is not configured yet.

dpkg: error processing postgresql (--configure):
 dependency problems - leaving unconfigured
Errors were encountered while processing:
 postgresql-9.1
 postgresql
N: Ignoring file 'plesk.list.ai_back' in directory '/etc/apt/sources.list.d/' as it has an invalid filename extension
N: Ignoring file 'plesk.list.ai_back' in directory '/etc/apt/sources.list.d/' as it has an invalid filename extension
N: Ignoring file 'plesk.list.ai_back' in directory '/etc/apt/sources.list.d/' as it has an invalid filename extension
E: Sub-process /usr/bin/dpkg returned an error code (1)



btw: I really love Hamburg ;-)
 
Totally new error since today (i swear yesterday it wasnt there) i got "Upgrade failed" on start page of Plesk Admin Panel on trying to repair this is shown up:

Code:
Internal error ;-P
ERROR: Zend_Db_Adapter_Exception: SQLSTATE[HY000] [2002] No such file or directory (Abstract.php:144)<br />
<br><a href='http://kb.plesk.com/plesk-error/search?metaId=1751d5edcca5340f78144a4499e8c1d5&messageId=2eb8d2699e722503bf79ae1c7819dc4e&...
Im not the php and sql coder and i cant interpret all this error psa messages correctly but i think the main sql database from plesk is damaged?
#Funny Fact: The message disappears after refreshing the webpage....

Not an issue. When you upgrade components, MariaDB packages or other DB/service packages are being replaced. While this happens, Zend_DB_Adapter cannot access the services, so it throws an error. Once the upgrade is over, everything is back to normal.
 
Hi Klaus Parzinger,

key is not available: NO_PUBKEY 4ABE1AC7557BEFF9
Pls. see the solution, provided at => https://github.com/owncloud/client/issues/5055#issuecomment-254308652 and adapt it for YOUR missing key, pls.


[....] Starting PostgreSQL 9.1 database server: main[....] The PostgreSQL server failed to start. Please check the log output: 2016-12-13 20:18:53 CET LOG: could not bind IPv4 socket: Cannot assign requested address 2016-12-13 20:18:53 CET HINT: Is another postmaster already running on port 5432? If not, wait a few seconds and retry. 2016-12-13 20:18:53 CET WARNING: could not create listen socket for "localhost" 2016-12-13 20:18:53 CET FATAL: could not create any TCP/IP[FAILets ... failed! failed! invoke-rc.d: initscript postgresql, action "start" failed. dpkg: error processing postgresql-9.1 (--configure): subprocess installed post-installation script returned error exit status 1 dpkg: dependency problems prevent configuration of postgresql: postgresql depends on postgresql-9.1; however: Package postgresql-9.1 is not configured yet.
First, please investigate, if you have an ADDITIONAL Plesk key, which includes "PostgreSQL support" ( pls. check your Plesk - license key(s) ). If you don't have an additional key installed, pls. don't even bother with that issue and DE-INSTALL all "PostgreSQL" - related packages on your server, to avoid such issues. If you still desire to have "PostgreSQL" packages installed on your server, pls. reply again, with the output of the SSH - commands ( logged in as user "root" ):
Code:
apt-get --purge autoremove postgresql-9.1 postgresql

followed by:

aptitude install postgresql postgresql-9.1


N: Ignoring file 'plesk.list.ai_back' in directory '/etc/apt/sources.list.d/' as it has an invalid filename extension
Pls. don't care about such an INFORMATION. "plesk.list.ai_back" is just a Plesk - sources - lists - backup - file, which will be ignored anyway, because of the extension "ai_back". ;)


After you solved these issues/errors/problems, pls. start over again with posting the requested ( new ) informations, because this might differ now, because of updates/upgrades/patches being installed.
 
I uninstalled Postgresql and checked the keys:

Code:
root@kproot:/var/lib/postgresql/9.1/main# apt-key list
/etc/apt/trusted.gpg
--------------------
pub   1024D/BA684223 2012-02-08 [expires: 2017-04-19]
uid                  isv:ownCloud OBS Project <isv:[email protected]>

pub   1024D/914BDF7E 2015-08-04
uid                  Plesk Team <[email protected]>
sub   2048g/04AB4879 2015-08-04

pub   4096R/89DF5277 2010-07-11
uid                  Guillaume Plessis <[email protected]>
sub   4096R/3D624A3B 2010-07-11
sub   4096R/A2098A6E 2010-07-11

/etc/apt/trusted.gpg.d//debian-archive-jessie-automatic.gpg
-----------------------------------------------------------
pub   4096R/2B90D010 2014-11-21 [expires: 2022-11-19]
uid                  Debian Archive Automatic Signing Key (8/jessie) <[email protected]>

/etc/apt/trusted.gpg.d//debian-archive-jessie-security-automatic.gpg
--------------------------------------------------------------------
pub   4096R/C857C906 2014-11-21 [expires: 2022-11-19]
uid                  Debian Security Archive Automatic Signing Key (8/jessie) <[email protected]>

/etc/apt/trusted.gpg.d//debian-archive-jessie-stable.gpg
--------------------------------------------------------
pub   4096R/518E17E1 2013-08-17 [expires: 2021-08-15]
uid                  Jessie Stable Release Key <[email protected]>

/etc/apt/trusted.gpg.d//debian-archive-squeeze-automatic.gpg
------------------------------------------------------------
pub   4096R/473041FA 2010-08-27 [expires: 2018-03-05]
uid                  Debian Archive Automatic Signing Key (6.0/squeeze) <[email protected]>

/etc/apt/trusted.gpg.d//debian-archive-squeeze-stable.gpg
---------------------------------------------------------
pub   4096R/B98321F9 2010-08-07 [expires: 2017-08-05]
uid                  Squeeze Stable Release Key <[email protected]>

/etc/apt/trusted.gpg.d//debian-archive-wheezy-automatic.gpg
-----------------------------------------------------------
pub   4096R/46925553 2012-04-27 [expires: 2020-04-25]
uid                  Debian Archive Automatic Signing Key (7.0/wheezy) <[email protected]>

/etc/apt/trusted.gpg.d//debian-archive-wheezy-stable.gpg
--------------------------------------------------------
pub   4096R/65FFB764 2012-05-08 [expires: 2019-05-07]
uid                  Wheezy Stable Release Key <[email protected]>

Still no horde webmail possible:
2016-12-13T21:10:44+00:00 ERR: HORDE [horde] FAILED LOGIN for [email protected] ([email protected]) [188.195.25.104] to horde [pid 11177 on line 216 of "/usr/share/psa-horde/login.php"]


Can`t understand this **** but i think i will give up ... its my last costumer on this old server and i will migrate him to 1&1 webservices soon. It just depends he will loos all his contacts (only saved in horde webmail and i didnt know that he is using this feature)
 
Hi Klaus Parzinger,

first, pls. be informed, that you could try to set the debug modus ( TEMPORARILY, pls! ) , to get a more detailed log, for further investigations:

/etc/psa-webmail/horde/horde/conf.php

... change INFO to DEBUG: "$conf['log']['priority'] = 'DEBUG';"
( repeat the login afterwards, to get a new DEBUG - entry for the process)


Second, pls. consider to change the mail - software from courier-imap to dovecot and backwards to courier-imap again ( or the other way round, if you already use dovecot ).

plesk installer --select-product-id plesk --select-release-current --install-component dovecot
plesk installer --select-product-id plesk --select-release-current --install-component courier-imap


( repeat the login afterwards, to get a new DEBUG - entry for the process)


Third
, pls. consider to post the content from "/usr/share/psa-horde/imp/config/backends.php" for investigations.
 
I tried Second several times. But i will come back after First and Third attached cause too long.
 

Attachments

  • PSA-Log.txt
    12.3 KB · Views: 3
  • backends.php.txt
    21.2 KB · Views: 2
Hi Klaus Parzinger,

let's try some work-around here pls.:

Make a backup of the existent file "/usr/share/psa-horde/imp/config/backends.php":
Code:
cp /usr/share/psa-horde/imp/config/backends.php /usr/share/psa-horde/imp/config/backends.php.BACKUP

Edit "/usr/share/psa-horde/imp/config/backends.php" and change:
Code:
...
    'port' => 143,
    // Plaintext logins are disabled by default on IMAP servers (see RFC 3501
    // [6.2.3]), so TLS is the only guaranteed authentication available by
    // default.
    'secure' => 'tls',
...
TO
Code:
...
    'port' => 993,
    // Plaintext logins are disabled by default on IMAP servers (see RFC 3501
    // [6.2.3]), so TLS is the only guaranteed authentication available by
    // default.
    'secure' => 'ssl',
...

Leave the DEBUG - level as suggested above and try again to login. Pls. post the new log - entries after your new login - attempts.
 
Hi Klaus Parzinger,

if you use SELinux as well on your server, pls. consider to disable it, to see if the root cause is because of un- / misconfigured SELinux policies. Pls. investigate as well the logs at "/var/log/audit/".
 
Back
Top