Resolved Webmail's domains are displaying the CentOS default page

[Jean Charles]

Hi,

I'am facing an issue with Webmails that they're displaying "Apache HTTP Server Test Page powered by CentOS" for all my webmail.domain.tld

Configuration: Onyx 17.0.17, up to date on CentOS Linux 7.3.1611
Horde and Roundcube are installed and were running like a charm before.
Webmail option is activated for all domains, with SSL Let's encrypt certificates.

I've tried to do actions below without success :

Activate/desactivate : webmail, SSL certificate, desinstall of horde and new install,
# /usr/local/psa/admin/bin/httpdmng --reconfigure-domain domain.tld
Restarted Apache, Ngninx​

# php -v

PHP 5.4.16 (cli) (built: Nov 6 2016 00:29:02)
Copyright (c) 1997-2013 The PHP Group
Zend Engine v2.4.0, Copyright (c) 1998-2013 Zend Technologies
with the ionCube PHP Loader v4.6.0, Copyright (c) 2002-2014, by ionCube Ltd.

# vi /var/log/httpd/error_log

[Tue Feb 21 14:12:11.839313 2017] [mpm_prefork:notice] [pid 12526] AH00170: caught SIGWINCH, shutting down gracefully
[Tue Feb 21 14:12:13.188570 2017] [suexec:notice] [pid 23223] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Tue Feb 21 14:12:13.205115 2017] [ssl:warn] [pid 23223] AH01909: RSA certificate configured for webmail.domain.tld:443 does NOT include an ID which matches the server name
[Tue Feb 21 14:12:13.205372 2017] [ssl:warn] [pid 23223] AH01909: RSA certificate configured for webmail.domain.tld:443 does NOT include an ID which matches the server name
…
[Tue Feb 21 14:12:13.212811 2017] [ssl:warn] [pid 23223] AH02292: Init: Name-based SSL virtual hosts only work for clients with TLS server name indication support (RFC 4366)
[Tue Feb 21 14:12:13.287704 2017] [auth_digest:notice] [pid 23223] AH01757: generating secret for digest authentication ...
[Tue Feb 21 14:12:13.288150 2017] [lbmethod_heartbeat:notice] [pid 23223] AH02282: No slotmem from mod_heartmonitor
[Tue Feb 21 14:12:13.304268 2017] [ssl:warn] [pid 23223] AH01909: RSA certificate configured for webmail.domain.tld:443 does NOT include an ID which matches the server name
[Tue Feb 21 14:12:13.304521 2017] [ssl:warn] [pid 23223] AH01909: RSA certificate configured for webmail.domain.tld:443 does NOT include an ID which matches the server name
…
[Tue Feb 21 14:12:13.311864 2017] [ssl:warn] [pid 23223] AH02292: Init: Name-based SSL virtual hosts only work for clients with TLS server name indication support (RFC 4366)
[Tue Feb 21 14:12:13.330235 2017] [mpm_prefork:notice] [pid 23223] AH00163: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_perl/2.0.10 Perl/v5.16.3 configured -- resuming normal operations
[Tue Feb 21 14:12:13.330258 2017] [core:notice] [pid 23223] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Tue Feb 21 14:12:23.450245 2017] [authz_core:error] [pid 23228] [client M.Y.I.P:34257] AH01630: client denied by server configuration: /usr/share/psa-horde/
[Tue Feb 21 14:12:23.591977 2017] [authz_core:error] [pid 23228] [client M.Y.I.P:34262] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: http://webmail.domain.tld/
[Tue Feb 21 14:12:23.592453 2017] [authz_core:error] [pid 23229] [client M.Y.I.P:34263] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: http://webmail.domain.tld/

Thank you so much for your help

J.

 

[Bitpalast]

Horde and Roundcube ... were running like a charm before.

Before what?

 

[Jean Charles]

Hi Peter,

I've made recently 2 changes but not sure if they are related:

1. Installed Memcached
2. Activated "cache_socache" through /admin/server/optimization-settings plesk page. I had a bug after the the page refresh all modules were unchecked, so I've desactivated this module directly in /etc/httpd/conf.modules.d/00-base.conf and other modules because of warnings like : mod_actions, mod_logio,

I wonder if the some modules are not missing or are not necessary?

#
# This file loads most of the modules included with the Apache HTTP
# Server itself.
#

LoadModule access_compat_module modules/mod_access_compat.so
#LoadModule actions_module modules/mod_actions.so
LoadModule alias_module modules/mod_alias.so
LoadModule allowmethods_module modules/mod_allowmethods.so
LoadModule auth_basic_module modules/mod_auth_basic.so
LoadModule auth_digest_module modules/mod_auth_digest.so
LoadModule authn_anon_module modules/mod_authn_anon.so
LoadModule authn_core_module modules/mod_authn_core.so
LoadModule authn_dbd_module modules/mod_authn_dbd.so
LoadModule authn_dbm_module modules/mod_authn_dbm.so
LoadModule authn_file_module modules/mod_authn_file.so
LoadModule authn_socache_module modules/mod_authn_socache.so
LoadModule authz_core_module modules/mod_authz_core.so
LoadModule authz_dbd_module modules/mod_authz_dbd.so
LoadModule authz_dbm_module modules/mod_authz_dbm.so
LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
LoadModule authz_host_module modules/mod_authz_host.so
LoadModule authz_owner_module modules/mod_authz_owner.so
LoadModule authz_user_module modules/mod_authz_user.so
LoadModule autoindex_module modules/mod_autoindex.so
LoadModule cache_module modules/mod_cache.so
LoadModule cache_disk_module modules/mod_cache_disk.so
LoadModule data_module modules/mod_data.so
LoadModule dbd_module modules/mod_dbd.so
LoadModule deflate_module modules/mod_deflate.so
LoadModule dir_module modules/mod_dir.so
LoadModule dumpio_module modules/mod_dumpio.so
LoadModule echo_module modules/mod_echo.so
LoadModule env_module modules/mod_env.so
LoadModule expires_module modules/mod_expires.so
LoadModule ext_filter_module modules/mod_ext_filter.so
LoadModule filter_module modules/mod_filter.so
LoadModule headers_module modules/mod_headers.so
LoadModule include_module modules/mod_include.so
LoadModule info_module modules/mod_info.so
LoadModule log_config_module modules/mod_log_config.so
#LoadModule logio_module modules/mod_logio.so
LoadModule mime_magic_module modules/mod_mime_magic.so
LoadModule mime_module modules/mod_mime.so
LoadModule negotiation_module modules/mod_negotiation.so
LoadModule remoteip_module modules/mod_remoteip.so
LoadModule reqtimeout_module modules/mod_reqtimeout.so
LoadModule rewrite_module modules/mod_rewrite.so
LoadModule setenvif_module modules/mod_setenvif.so
LoadModule slotmem_plain_module modules/mod_slotmem_plain.so
LoadModule slotmem_shm_module modules/mod_slotmem_shm.so
LoadModule socache_dbm_module modules/mod_socache_dbm.so
LoadModule socache_memcache_module modules/mod_socache_memcache.so
LoadModule socache_shmcb_module modules/mod_socache_shmcb.so
LoadModule status_module modules/mod_status.so
LoadModule substitute_module modules/mod_substitute.so
LoadModule suexec_module modules/mod_suexec.so
LoadModule unique_id_module modules/mod_unique_id.so
LoadModule unixd_module modules/mod_unixd.so
LoadModule userdir_module modules/mod_userdir.so
LoadModule version_module modules/mod_version.so
LoadModule vhost_alias_module modules/mod_vhost_alias.so

LoadModule buffer_module modules/mod_buffer.so
#LoadModule watchdog_module modules/mod_watchdog.so
#LoadModule heartbeat_module modules/mod_heartbeat.so
#LoadModule heartmonitor_module modules/mod_heartmonitor.so
LoadModule usertrack_module modules/mod_usertrack.so
LoadModule dialup_module modules/mod_dialup.so
LoadModule charset_lite_module modules/mod_charset_lite.so
#LoadModule log_debug_module modules/mod_log_debug.so
LoadModule ratelimit_module modules/mod_ratelimit.so
LoadModule reflector_module modules/mod_reflector.so
LoadModule request_module modules/mod_request.so
LoadModule sed_module modules/mod_sed.so
LoadModule speling_module modules/mod_speling.so

#LoadModule cache_socache_module /usr/lib64/httpd/modules/mod_cache_socache.so
LoadModule asis_module /usr/lib64/httpd/modules/mod_asis.so
LoadModule file_cache_module /usr/lib64/httpd/modules/mod_file_cache.so
LoadModule log_forensic_module /usr/lib64/httpd/modules/mod_log_forensic.so
LoadModule macro_module /usr/lib64/httpd/modules/mod_macro.so
#LoadModule proxy.plesk_module /usr/lib64/httpd/modules/mod_proxy.plesk.so
#LoadModule proxy_fcgi.plesk_module /usr/lib64/httpd/modules/mod_proxy_fcgi.plesk.so

 

[Bitpalast]

I'll need to analyze this bottom up, because I have no obvious clue why this is happening. A few questions to rule out some issues:
- Have you checked that a ping of webmail.DOMAIN.TLD resolves to the IP address of your host?
- Is the line "IncludeOptional '/etc/httpd/conf/plesk.conf.d/webmails/*.conf'" present in /etc/httpd/conf.d/zz010_psa_httpd.conf?
- Does the directory /etc/httpd/conf/plesk.conf.d/webmails have configuraton files in it that look like DOMAIN.TLD_webmail.conf?
- When you try to open a webmail address and add an /index.php to the webmail url, do you then see the login of webmail?

Besides the issue that you are actually seeing, according to the following article Horde does not work with enabled memcache anyway:
https://support.plesk.com/hc/en-us/articles/213908605

 

[Jean Charles]

- Have you checked that a ping of webmail.DOMAIN.TLD resolves to the IP address of your host?

Yes the ping is ok

- Is the line "IncludeOptional '/etc/httpd/conf/plesk.conf.d/webmails/*.conf'" present in /etc/httpd/conf.d/zz010_psa_httpd.conf?

Yes it's present

- Does the directory /etc/httpd/conf/plesk.conf.d/webmails have configuraton files in it that look like DOMAIN.TLD_webmail.conf?

Yes the webmail domain conf is present too

- When you try to open a webmail address and add an /index.php to the webmail url, do you then see the login of webmail?

No, I have a "Forbidden You don't have permission to access /index.php on this server."

Besides the issue that you are actually seeing, according to the following article Horde does not work with enabled memcache anyway:
https://support.plesk.com/hc/en-us/articles/213908605

https://support.plesk.com/hc/en-us/articles/213908605
Now it's disabled but with the same issue.

Thanks for your help Peter.

J.

 

[Bitpalast]

Please check a few more things:

a) When you try to open a webmail-domain, what is logged in /var/log/httpd/access_log and /var/log/httpd/error_log? There should be error messages in error_log for the moment when you try to open the URL.

b) In the Plesk Apache configuration (GUI, Apache settings): Is Apache set to "MPM Prefork" mode and is the PHP5 module enabled? Webmail will probably not work, if that setting is different.

c) In the webmail configuration files, where does the document root point to? For example it can point to
/usr/share/psa-roundcube
or
/usr/share/psa-horde
When you descend into that directory, do you see a Roundcube (or Horde) installation in it? At least an index.php file? This is to make sure that the webmail files are actually present, because the errors you are describing let me assume that the files are missing.

If all of the above seems good, have you enabled selinux or did you make any changes to file or directory permissions recently?

 

[Jean Charles]

a) When you try to open a webmail-domain, what is logged in /var/log/httpd/access_log and /var/log/httpd/error_log? There should be error messages in error_log for the moment when you try to open the URL.

In access_log, I have those logs:

SERVER_IP - - [21/Feb/2017:20:47:44 +0100] "GET /index.php HTTP/1.0" 403 211 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/602.4.8 (KHTML, like Gecko) Version/10.0.3 Safari/602.4.8"

SERVER_IP- - [21/Feb/2017:20:47:46 +0100] "GET / HTTP/1.0" 403 4897 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/602.4.8 (KHTML, like Gecko) Version/10.0.3 Safari/602.4.8"

SERVER_IP - - [21/Feb/2017:20:47:46 +0100] "GET /noindex/css/fonts/Regular/OpenSans-Regular.woff HTTP/1.0" 403 249 "https://webmail.domain.tld/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/602.4.8 (KHTML, like Gecko) Version/10.0.3 Safari/602.4.8"

In error_log, it's really weird, a lot of lines with the same issue for the same domain.tld :

[Tue Feb 21 20:47:44.957089 2017] [authz_core:error] [pid 16882] [client M.Y.I.P:33446] AH01630: client denied by server configuration: /usr/share/psa-horde/index.php
[Tue Feb 21 20:47:46.209973 2017] [authz_core:error] [pid 14667] [client M.Y.I.P:33517] AH01630: client denied by server configuration: /usr/share/psa-horde/
[Tue Feb 21 20:47:46.339056 2017] [authz_core:error] [pid 14665] [client M.Y.I.P:33521] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.339347 2017] [authz_core:error] [pid 14670] [client M.Y.I.P:33522] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.339694 2017] [authz_core:error] [pid 14668] [client M.Y.I.P:33523] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.340205 2017] [authz_core:error] [pid 17250] [client M.Y.I.P:33524] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.360767 2017] [authz_core:error] [pid 14667] [client M.Y.I.P:33525] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.369035 2017] [authz_core:error] [pid 16882] [client M.Y.I.P:33526] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.369269 2017] [authz_core:error] [pid 20220] [client M.Y.I.P:33527] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.369700 2017] [authz_core:error] [pid 14669] [client M.Y.I.P:33528] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.382050 2017] [authz_core:error] [pid 14665] [client M.Y.I.P:33529] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.435542 2017] [authz_core:error] [pid 14670] [client M.Y.I.P:33530] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.435686 2017] [authz_core:error] [pid 14668] [client M.Y.I.P:33531] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.436113 2017] [authz_core:error] [pid 17250] [client M.Y.I.P:33532] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.436460 2017] [authz_core:error] [pid 14667] [client M.Y.I.P:33533] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.491024 2017] [authz_core:error] [pid 16882] [client M.Y.I.P:33534] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.504601 2017] [authz_core:error] [pid 20220] [client M.Y.I.P:33535] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.505150 2017] [authz_core:error] [pid 14669] [client M.Y.I.P:33536] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.505658 2017] [authz_core:error] [pid 14665] [client M.Y.I.P:33537] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.506051 2017] [authz_core:error] [pid 14670] [client M.Y.I.P:33538] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.512151 2017] [authz_core:error] [pid 14668] [client M.Y.I.P:33539] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.541044 2017] [authz_core:error] [pid 17250] [client M.Y.I.P:33540] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.542259 2017] [authz_core:error] [pid 14667] [client M.Y.I.P:33541] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.542771 2017] [authz_core:error] [pid 16882] [client M.Y.I.P:33542] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.543179 2017] [authz_core:error] [pid 20220] [client M.Y.I.P:33543] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.559482 2017] [authz_core:error] [pid 14669] [client M.Y.I.P:33544] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.559550 2017] [authz_core:error] [pid 14665] [client M.Y.I.P:33545] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.563907 2017] [authz_core:error] [pid 14670] [client M.Y.I.P:33546] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/
[Tue Feb 21 20:47:46.563996 2017] [authz_core:error] [pid 14668] [client M.Y.I.P:33547] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/

[Tue Feb 21 20:57:21.956142 2017] [authz_core:error] [pid 14669] [client M.Y.I.P:35291] AH01630: client denied by server configuration: /usr/share/psa-horde/noindex, referer: https://webmail.domain.tld/

b) In the Plesk Apache configuration (GUI, Apache settings): Is Apache set to "MPM Prefork" mode and is the PHP5 module enabled? Webmail will probably not work, if that setting is different.

Yes MPM Prefork and php5 module enabled

c) In the webmail configuration files, where does the document root point to? For example it can point to
/usr/share/psa-horde

It point for /psa-horde

When you descend into that directory, do you see a Roundcube (or Horde) installation in it? At least an index.php file? This is to make sure that the webmail files are actually present, because the errors you are describing let me assume that the files are missing.

Yes those files (and other) are presents, horde installation looks fine.

If all of the above seems good, have you enabled selinux or did you make any changes to file or directory permissions recently?

The only thing that could change should be in apache modules loaded. please see the screenshot attached if something looks wrong?

Thanks again

J.

 

[Bitpalast]

O.k., thank you for your effort in providing all that information. I am quite certain that this article describes the same issue in a different context and also names the solution (for the different context): http://serverfault.com/questions/502071/index-html-is-not-read-from-the-intended-directory and this Apache documentation explains the background to it: https://wiki.apache.org/httpd/ClientDeniedByServerConfiguration . But impossible for me to tell where this change has been applied.

It is either in one of the files descending from /etc/httpd or it is a security software on the host that is doing it, e.g. mod_security.

I'd try to run
# /usr/local/psa/admin/bin/httpdmng --reconfigure-all
Note that you tried a similar thing in the first step, but you only reconfigured the domain. I suggest to reconfigure all, because a setting in another file, affecting all domains, could be wrong.

If that does not solve it, deactivate mod_security (not the Apache module, but option from Plesk) for a test.
If that still does not solve it, deactivate fail2ban for a test.

If that still does not solve the problem, I'll need to sleep over it, because it is becoming difficult to remotely analyze this further.

 

[Jean Charles]

Hi Peter,

Thanks for your help!
I've tried this command and all webmail are up now!

/usr/local/psa/bootstrapper/pp17.0.17-bootstrapper/bootstrapper.sh repair

Again, thank you so much for your great support. I very much appreciate it.

J.

 

[Bitpalast]

O.k., yes, a full repair can also be an option.

 

[peter_M]

thanks so much for this post - i had the same problem with plesk 18.0.32 and horde/roundcube for severel days now.

/usr/local/psa/bootstrapper/ppXX.0.XX-bootstrapper/bootstrapper.sh repair

did the job!

 

[Neuwelt]

Please check a few more things:

a) When you try to open a webmail-domain, what is logged in /var/log/httpd/access_log and /var/log/httpd/error_log? There should be error messages in error_log for the moment when you try to open the URL.

b) In the Plesk Apache configuration (GUI, Apache settings): Is Apache set to "MPM Prefork" mode and is the PHP5 module enabled? Webmail will probably not work, if that setting is different.

c) In the webmail configuration files, where does the document root point to? For example it can point to
/usr/share/psa-roundcube
or
/usr/share/psa-horde
When you descend into that directory, do you see a Roundcube (or Horde) installation in it? At least an index.php file? This is to make sure that the webmail files are actually present, because the errors you are describing let me assume that the files are missing.

If all of the above seems good, have you enabled selinux or did you make any changes to file or directory permissions recently?

Thanks Peter,
I just had a similor problem except I had roundcube installed the following help me solve the problem.
>> In the Plesk Apache configuration (GUI, Apache settings): Is Apache set to "MPM Prefork" mode and is the PHP5 module enabled? Webmail will probably not work, if that setting is different. <<

I turned PHP5 on in plesk Add/Rmove Components.