Workarounds

[IgorG]

New available workarounds will be published here.

Note, these workarounds have not been tested enough, therefore remember that you use them at own risk!

I will be very grateful, if you send me responses to PM if it has really helped you.

 

[IgorG]

Problem with login to webmail with full IDN name

Plesk Version: 9.2.1

Problem with login using IDN name into webmail (no difference - ATmail or Horde). Login failed, but when login using Unicode name, e.g. xn--werdhlzli-47a.ch - it works.

Solution:

http://kb.odin.com/en/6988

 

[IgorG]

Unable to set up user name in FTP Backup repository settings with '@'

Plesk 9.x version.

Go to Backup Manager > Personal FTP repository > Configure
Set FTP user login '[email protected]'

Actual result: Error: Name must contain alphanumeric characters only.

Solution:

http://kb.odin.com/en/6989

 

[IgorG]

[PCI compliance] Expect Header Cross-Site Scripting Vulnerability

Plesk 8.6 version

From scan report:
=============
Security warning found on port/service "pcsync-https (8443/tcp)"

Plugin "Expect Header Cross-Site Scripting Vulnerability"

Category "CGI abuses : XSS "
............
=============

Solution:

http://kb.odin.com/en/7057

 

[IgorG]

phpMyAdmin upgrade

I've attached zip with patched phpMyAdmin-2.11.?9.5-all-languages and script to migrate settings from phpMyAdmin-2.8.2.4 installed with Plesk. To install phpMyAdmin 2.11.?9.5 you need to:

1. Download the archive and unpack it.

~# wget http://kb.odin.com/Attachments/...phpMyAdmin.zip
~# unzip phpMyAdmin.zip

2. Extract patched phpMyAdmin:

~# cd phpMyAdmin
~# tar -xzf phpMyAdmin-2.11.9.5-all-languages.tar.gz

3. Migrate settings from installed phpMyAdmin to new one:

~# cd phpMyAdmin-2.11.9.5-all-languages && sh ../migrate_settings.sh

4. Backup files of installed phpMyAdmin (you can remove it later):

~# mv /usr/local/psa/admin/htdocs/domains/databases/phpMyAdmin /usr/local/psa/admin/htdocs/domains/databases/phpMyAdmin.old

5. Move files of new phpMyAdmin to Parallels Panel root directory:

~# cd ../
~# mv phpMyAdmin-2.11.9.5-all-languages /usr/local/psa/admin/htdocs/domains/databases/phpMyAdmin

Or look at corresponding KB article http://kb.odin.com/en/6990

 

[IgorG]

Server SSL certificate was not migrated

SSL certificate installed in server certificate repository on source PPP 8.6 is not migrated to PPP 9.2.2

Solution:

http://kb.odin.com/en/6627

 

[IgorG]

Global mail aliases cannot access handlers/ write to handler spool

Plesk 9.2.2

Global mail aliases cannot access handlers/ write to handler spool. In maillog:

Aug 20 08:23:29 plesk9 qmail: 1250756609.557153 new msg 270481826
Aug 20 08:23:29 plesk9 qmail: 1250756609.557378 info msg 270481826: bytes 1229 from <#@[]> qp 22471 uid 2522
Aug 20 08:23:29 plesk9 qmail: 1250756609.570683 starting delivery 45: msg 270481826 to local [email protected]
Aug 20 08:23:29 plesk9 qmail: 1250756609.570908 status: local 1/50 remote 1/1000
Aug 20 08:23:29 plesk9 qmail-local-handlers[22472]: Handlers Filter before-local for qmail started ...
Aug 20 08:23:29 plesk9 qmail-local-handlers[22472]: cannot create temporary file - (13) Permission denied
Aug 20 08:23:29 plesk9 qmail-local-handlers[22472]: cannot read message from stdin
Aug 20 08:23:29 plesk9 qmail: 1250756609.575117 delivery 45: failure:
Aug 20 08:23:29 plesk9 qmail: 1250756609.575325 status: local 0/50 remote 1/1000
Aug 20 08:23:29 plesk9 qmail: 1250756609.575426 triple bounce: discarding bounce/270481826
Aug 20 08:23:29 plesk9 qmail: 1250756609.575499 end msg 270481826

Solution:

http://kb.odin.com/en/6997

 

[IgorG]

E-mail HTML domain report lacks CSS specification causing formating problems

Plesk 8.x. Fixed for Plesk 9.x

E-mail HTML domain report lacks CSS specification causing formatting problems. Login to Parallels Plesk Panel, select domain and click on report. Click send full report to a specified e-mail. See received mail report. CSS styles not defined in the HTML message, causing formatting trouble.

Solution:

http://kb.odin.com/en/7054

 

[IgorG]

php mail() function cannot call qmail-inject

Plesk 8.6

php mail() function cannot call qmail-inject

Steps to reproduce:

- have simple php script with mail():

[root@server024 ~]# cat /var/www/vhosts/nams1.com/httpdocs/lltestmail.php
<?php

mail("[email protected]","test","test");

echo "OK";

?>

- have selinux enabled

[root@server024 ~]# getenforce
Permissive

- invoke script from web:

curl http://nams1.com/lltestmail.php

Actual result:

in case selinux is enforced, mail message will not be sent
in case selinux is in permissive mode, mail message will be sent

Solution:

http://kb.odin.com/en/6998

 

[IgorG]

'Applications' in the left Main Menu

Plesk 9.2.2

When logged in as a Domain Administrator (example.com) the navigation pane on the left shows the following items:
----------
Main menu
Home
Applications
Settings

Help&Support;
Help
----------
When someone clicks on Applicatoins they get redirected to the dashboard again because we do not support applications and a license error is shown.

Solution:

http://kb.odin.com/en/7000

 

[IgorG]

When PHP is running as CGI, it cannot create sessions in default sessions directory

Plesk 9.2.1/9.2.2

When enabling cgi/fastcgi php runs under the ftp user.
php.ini states default path:

# cat /etc/php.ini | grep session.save_path
session.save_path = "/var/lib/php/session"

# ls -dl /var/lib/php/session/
drwxrwx--- 2 root apache 4096 Jul 17 09:01 /var/lib/php/session/

# rpm -qf /var/lib/php/session/
php-5.1.6-23.el5

FTP user is not allowed to write in the sessions directory. This means that customer who run php in cgi can not use sessions.

Solution:

http://kb.odin.com/en/7056

 

[IgorG]

Passwords with '\' character for mail account after Plesk migration

Plesk 9.2.2

After migration to the mail accounts passwords that have '\' character additional '\' is added.

1. Create mail account with password that have '\' character
2. Migrate it to another PPP server using GUI
3. Check password on the destination server.

Solution:

http://kb.odin.com/en/7001

 

[IgorG]

Hosting cannot be created if server is behind NAT and DNS template pre-configured

Plesk 9.x

Hosting cannot be created if server is behind NAT and DNS template pre-configured with real IPs.

You have server behind NAT and need to host domains on fake IPs, but DNS
records should refer to real external IPs.

You configure global DNS template and set real IP in A records instead of <ip>.

When you create a domain with physical hosting, the following error appears:

Can't manage hosting: Unable to set current ip address: IP address is missing.
You should look on doman's DNS settings (domain seems to be not created
properly)

0: /usr/local/psa/admin/plib/ui/client.domain.hosting.setup.php:133
plesk__client__domain__hosting__setup->accessItem(string 'POST', NULL null)
1: /usr/local/psa/admin/plib/UIPointer.php:596
UIPointer->access(string 'POST')
2: /usr/local/psa/admin/htdocs/plesk.php:36

Solution:

http://kb.odin.com/en/7004

 

[IgorG]

How to enable psi.log

http://kb.odin.com/en/7020

 

[IgorG]

Domain migration fails upon Spamassassin 'action' element XML validation

Plesk 9.2.x

Migrating a domain with Spamassassin enabled for mail services and mail accounts. Any mail account has Spamassassin action to delete spam. Migration fails with an error in GUI:

<?xml version="1.0"?>
<execution-result status="error"><message code="InternalDtdValidationFailed" severity="error"><context>void plesk::validateSchema(plesk::tXmlDocument&, const std::string&)</context><file>./xml_parse.cpp</file><line>412</line><text>Failed validation of the document with its internal DTD. The errors are: Element 'spamassassin', attribute 'action': [facet 'enumeration'] The value 'del' is not an element of the set {'delete', 'mark'}.Element 'spamassassin', attribute 'action': 'del' is not a valid value of the local atomic type.Element 'spamassassin', attribute 'action': [facet 'enumeration'] The value 'del' is not an element of the set {'delete', 'mark'}.Element 'spamassassin', attribute 'action': 'del' is not a valid value of the local atomic type.Element 'spamassassin', attribute 'action': [facet 'enumeration'] The value 'del' is not an element of the set {'delete', 'mark'}.Element 'spamassassin', attribute 'action': 'del' is not a valid value of the local atomic type.Element 'spamassassin', attribute 'action': [facet 'enumeration'] The value 'del' is not an element of the set {'delete', 'mark'}.Element 'spamassassin', attribute 'action': 'del' is not a valid value of the local atomic type.Element 'spamassassin', attribute 'action': [facet 'enumeration'] The value 'del' is not an element of the set {'delete', 'mark'}.Element 'spamassassin', attribute 'action': 'del' is not a valid value of the local atomic type..</text></message></execution-result>

Solution:

http://kb.odin.com/en/7021

 

[IgorG]

After upgrade to Plesk 9.2.3 Dr.Web notification deliveries start to fail

Plesk 9.2.3

After upgrade to Plesk 9.2.3 Dr.Web notification deliveries start to fail:

Hi. This is the qmail-send program at ne75220.nerionics.de.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

.......


Solution:

http://kb.odin.com/en/7023

 

[IgorG]

RKHunter warning improvement suggestions

Plesk 9.2.x

Run Security check via Watchdog and see warnings of the following kind:

"Warning: The command '/bin/egrep' has been replaced by a script: /bin/egrep: Bourne shell script text executable"

"/etc/xinetd.d/ftp_psa". The complete warning message is: "Warning: Found enabled xinetd service: /etc/xinetd.d/ftp_psa"

Solution:

http://kb.odin.com/en/7027

 

[IgorG]

How to upgrade AtMail to commercial version

http://kb.odin.com/en/7029

 

[IgorG]

Search by alias or subdomain always shows "0 found"

Plesk 9.2.2

Searching by alias or subdomain substring always shows "0 found"

Solution:

http://kb.odin.com/en/7030

 

[IgorG]

No way to catch client's password change in Plesk 9.2

Plesk 9.2.2

None of event handlers can catch nor is being executed on changing a password for a client account in Plesk GUI.

Solution:

http://kb.odin.com/en/7045