HowTo: I-MSCP 1.5.3 installation on Debian 10

**Eyecu** · Sep 8th 2020

Nothing really gets logged in the log file thats what made this hard to figure out. Like i said after an hour or digging around and trying various things it end up i stopped proftpd and started it again. in the end it started working again and hasn't been an issue since.

**Nagilum** · Dec 1st 2020

I had the same issue with proftpd, could not start this service after a new clean install of a debian server following this HowTo. Stopping and starting of proftpd did not help. However a "force-start" did help and I can now use ftp connections.

cu
Nagilum

**fulltilt** · Mar 7th 2021

Quote from Nagilum

I had the same issue with proftpd, could not start this service after a new clean install of a debian server following this HowTo. Stopping and starting of proftpd did not help. However a "force-start" did help and I can now use ftp connections.

cu
Nagilum

Code

nano /etc/default/proftpd
under
CONFIG_FILE=/etc/proftpd/proftpd.conf
add:
# Master system-wide proftpd switch. The initscript
# will not run if it is not set to yes.
RUN="yes"

**fulltilt** · Mar 23rd 2021

some more fixes:

Code

# Bind9 when ipv6 disabled (Unable to fetch DNSKEY set)
sudo nano /etc/default/bind9
OPTIONS="-u bind -4"

Code

# PHP apc
apt install php7.0-apcu-bc php7.0-apcu php7.0-dev
edit /autoinstaller/postinstall/php_apcu_bc.sh
; priority=25
;extension=apc.so
and
edit /autoinstaller/postinstall/php_apcu.sh
extension=apcu.so
extension=apc.so
nano /etc/php/7.0/apache2/conf.d/20-apcu.ini
extension=apcu.so
extension=apc.so
nano /etc/php/7.0/apache2/conf.d/25-apcu_bc.ini
; priority=25
;extension=apc.so

Display More

Code

# LetsEncrypt fix
mv /opt/eff.org /opt/eff.org_OLD
cd /tmp
sudo wget https://raw.githubusercontent.com/certbot/certbot/7f0fa18c570942238a7de73ed99945c3710408b4/letsencrypt-auto-source/letsencrypt-auto
chmod a+x letsencrypt-auto
./letsencrypt-auto --dry-run

Code

# Proftpd starter
nano /etc/default/proftpd
#below
CONFIG_FILE=/etc/proftpd/proftpd.conf
# add
# Master system-wide proftpd switch. The initscript
# will not run if it is not set to yes.
RUN="yes"

Code

# dovecot TLS protocols
nano /etc/dovecot/dovecot.conf
#ssl_protocols = !SSLv3
ssl_min_protocol = TLSv1.2
ssl_dh=</etc/dovecot/dh.pem
# run
dd if=/var/lib/dovecot/ssl-parameters.dat
openssl dhparam -out /etc/dovecot/dh.pem 4096
sudo service dovecot restart

Code

# disable outdated TLS protocols
nano /etc/apache2/sites-available/00_nameserver.conf
SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
nano /etc/apache2/mods-enabled/ssl.conf
SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
nano /etc/nginx/nginx.conf
ssl_protocols TLSv1.2;
nano /etc/postfix/main.cf
smtpd_tls_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1
smtp_tls_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1
# add
smtp_tls_mandatory_protocols=!SSLv2, !SSLv3, !TLSv1, !TLSv1.1
smtpd_tls_mandatory_protocols=!SSLv2, !SSLv3, !TLSv1, !TLSv1.1
nano /etc/proftpd/proftpd.conf
TLSProtocol TLSv1.2

Display More

debian9 to debian10 fixes

Code

sudo apt purge rsyslog
sudo apt install rsyslog
systemctl daemon-reload
sudo service rsyslog restart

you should purge & re-install also:

dovecot, fail2ban, spamassassin, opendkim, postfwd

because pid location changed from "/var/run" to "/run"

or edit all these files:

Code

nano /lib/systemd/system/dovecot.service
nano /etc/systemd/system/multi-user.target.wants/dovecot.service
PIDFile=/run/dovecot/master.pid

logrotate

Code

edit rsyslog template file
/configs/debian/logrotate.d/rsyslog
to:
/var/log/syslog
{
rotate 7
daily
missingok
notifempty
delaycompress
compress
postrotate
/usr/lib/rsyslog/rsyslog-rotate
endscript
}
/var/log/mail.info
/var/log/mail.warn
/var/log/mail.err
/var/log/mail.log
/var/log/daemon.log
/var/log/kern.log
/var/log/auth.log
/var/log/user.log
/var/log/lpr.log
/var/log/cron.log
/var/log/debug
/var/log/messages
{
rotate 4
weekly
missingok
notifempty
compress
delaycompress
sharedscripts
postrotate
/usr/lib/rsyslog/rsyslog-rotate
endscript
}
and also edit (check):
nano /etc/logrotate.d/rsyslog
sudo service rsyslog restart

Display More

and another dovecot fix ...

Code

nano /etc/dovecot/dovecot.conf
# add below service quota-warning part
service stats {
unix_listener stats-reader {
user = vmail
mode = 0660
}
unix_listener stats-writer {
user = vmail
mode = 0660
}
}

Display More

reboot afterwards

LordVardus · Jul 30th 2022

Quote from fulltilt

.

**joximu** · Jul 31st 2022

try with the ip - with :8880...

/J

**fulltilt** · Aug 8th 2022

it seems AppArmor causes errors with bind when using debian 11 (and other new systems) ...

e.g.

Add function to configure AppArmor (needed to allow use of /etc/bind for zone files)

https://git.ispconfig.org/ispc…2529ffbddc17bc9966?page=2

**sgumbert** · Aug 12th 2022

Hey,

I'm currlently trying to install the latest i-mscp maintenance checkout from git on an Ubuntu 22.04 machine. In addition to fulltilt, I was able to install the bind zone by installing the bind-utils and changing the named_compilezone parameter in 'engine/PerlLib/Servers/named/bind.pm' on line 1055.
(Changing the constant in configs/debian/bind/bind.data.dist didn't give any success).

Code

engine/PerlLib/Servers/named/bind.pm
sub _compileZone
{
my ( $self, $zone, $filename ) = @_;
local $UMASK = 027;
my $rs = execute(
[
#$self->{'config'}->{'NAMED_COMPILEZONE'},
'named-compilezone',
'-f', 'text',
'-F', $self->{'config'}->{'BIND_DB_FORMAT'},
'-s', 'relative',
'-o', "$self->{'config'}->{'BIND_DB_MASTER_DIR'}/$zone.db",
$zone,
$filename
],
\my $stdout,
\my $stderr
);
debug( $stdout ) if !$rs && length $stdout;
error( sprintf(
"Couldn't compile the '%s' DNS zone: %s%s", $zone, $stdout, $stderr
)) if $rs;
$rs;
}

Display More

Hope that helps someone here

Regards,

Sascha

**fulltilt** · Aug 13th 2022

Quote from sgumbert

I'm currlently trying to install the latest i-mscp maintenance checkout from git on an Ubuntu 22.04 machine. In addition to

please try:

Please help - update i-MSCP to run on new system

this mod works for me w/ debian 11

Code

nano /usr/local/src/imscp-1.5.3-maintenance-joxi/bind_postinst.sh
replace everything with:
#!/bin/sh
# i-MSCP - internet Multi Server Control Panel
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
set -e
if [ -f /etc/init.d/named ]; then
/usr/bin/find /usr/local/src/imscp-1.5.3-maintenance-joxi/configs/debian/bind/bind.data.dist -type f -exec sed -i 's|bind9|named|g' {} \;
fi
if [ -f /usr/local/src/imscp-1.5.3-maintenance-joxi/configs/debian/systemd/bind9.service ]; then
/usr/bin/find /usr/local/src/imscp-1.5.3-maintenance-joxi/configs/debian/systemd/bind9.service -type f -exec sed -i 's|bind9|named|g' {} \;
fi
if [ -f /usr/local/src/imscp-1.5.3-maintenance-joxi/configs/debian/systemd/bind9.service ]; then
/usr/bin/find /usr/local/src/imscp-1.5.3-maintenance-joxi/configs/debian/systemd/bind9.service -type f -exec sed -i 's|multi-user.target|named.service|g' {} \;
fi
if [ -f /usr/local/src/imscp-1.5.3-maintenance-joxi/configs/debian/systemd/bind9-resolvconf.service ]; then
/usr/bin/find /usr/local/src/imscp-1.5.3-maintenance-joxi/configs/debian/systemd/bind9-resolvconf.service -type f -exec sed -i 's|bind9.service|named.service|g' {} \;
fi
if [ -f /etc/default/bind9 ]; then
/usr/bin/mv /etc/default/bind9 /etc/default/named
fi
if [ -f /etc/systemd/system/bind9-resolvconf.service ]; then
/usr/bin/rm /etc/systemd/system/bind9-resolvconf.service
fi
if [ -f /etc/systemd/system/bind9.service ]; then
/usr/bin/rm /etc/systemd/system/bind9.service
fi
if [ -f /lib/systemd/system/bind9.service ]; then
/usr/bin/mv /lib/systemd/system/bind9.service /lib/systemd/system/named.service
fi
if [ -f /lib/systemd/system/bind9-resolvconf.service ]; then
/usr/bin/mv /lib/systemd/system/bind9-resolvconf.service /lib/systemd/system/named-resolvconf.service
fi
if [ -f /lib/systemd/system/named.service ]; then
/usr/bin/find /lib/systemd/system/named.service -type f -exec sed -i 's|bind9|named|g' {} \;
fi
if [ -f /lib/systemd/system/named.service ]; then
/usr/bin/find /lib/systemd/system/named.service -type f -exec sed -i 's|multi-user.target|named.service|g' {} \;
fi
if [ -f /lib/systemd/system/named-resolvconf.service ]; then
/usr/bin/find /lib/systemd/system/named-resolvconf.service -type f -exec sed -i 's|bind9.service|named.service|g' {} \;
fi
/usr/bin/ln -s /lib/systemd/system/named-resolvconf.service /etc/systemd/system/bind9-resolvconf.service
/usr/bin/ln -s /lib/systemd/system/named.service /etc/systemd/system/bind9.service
if [ -f /etc/default/named ]; then
/usr/bin/find /etc/default/named -type f -exec sed -i 's|OPTIONS="-u bind"|OPTIONS="-u bind -4"|g' {} \;
/usr/bin/find /etc/default/named -type f -exec sed -i 's|OPTIONS="-4 -u bind"|OPTIONS="-u bind -4"|g' {} \;
fi
/usr/bin/systemctl daemon-reload

Display More

**sgumbert** · Aug 15th 2022

Is the Letsencrypt (certbot) plugin working for you on Debian 11?

Quote from fulltilt

please try:
Please help - update i-MSCP to run on new system

this mod works for me w/ debian 11

Code

nano /usr/local/src/imscp-1.5.3-maintenance-joxi/bind_postinst.sh

replace everything with:

#!/bin/sh

# i-MSCP - internet Multi Server Control Panel

# Copyright 2022 by Christian Hernmarck <joximu@web.de>

#

# This program is free software; you can redistribute it and/or

# modify it under the terms of the GNU General Public License

# as published by the Free Software Foundation; either version 2

# of the License, or (at your option) any later version.

#

# This program is distributed in the hope that it will be useful,

# but WITHOUT ANY WARRANTY; without even the implied warranty of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

# GNU General Public License for more details.

set -e

if [ -f /etc/init.d/named ]; then

/usr/bin/find /usr/local/src/imscp-1.5.3-maintenance-joxi/configs/debian/bind/bind.data.dist -type f -exec sed -i 's|bind9|named|g' {} \;

fi

if [ -f /usr/local/src/imscp-1.5.3-maintenance-joxi/configs/debian/systemd/bind9.service ]; then

/usr/bin/find /usr/local/src/imscp-1.5.3-maintenance-joxi/configs/debian/systemd/bind9.service -type f -exec sed -i 's|bind9|named|g' {} \;

fi

if [ -f /usr/local/src/imscp-1.5.3-maintenance-joxi/configs/debian/systemd/bind9.service ]; then

/usr/bin/find /usr/local/src/imscp-1.5.3-maintenance-joxi/configs/debian/systemd/bind9.service -type f -exec sed -i 's|multi-user.target|named.service|g' {} \;

fi

if [ -f /usr/local/src/imscp-1.5.3-maintenance-joxi/configs/debian/systemd/bind9-resolvconf.service ]; then

/usr/bin/find /usr/local/src/imscp-1.5.3-maintenance-joxi/configs/debian/systemd/bind9-resolvconf.service -type f -exec sed -i 's|bind9.service|named.service|g' {} \;

fi

if [ -f /etc/default/bind9 ]; then

/usr/bin/mv /etc/default/bind9 /etc/default/named

fi

if [ -f /etc/systemd/system/bind9-resolvconf.service ]; then

/usr/bin/rm /etc/systemd/system/bind9-resolvconf.service

fi

if [ -f /etc/systemd/system/bind9.service ]; then

/usr/bin/rm /etc/systemd/system/bind9.service

fi

if [ -f /lib/systemd/system/bind9.service ]; then

/usr/bin/mv /lib/systemd/system/bind9.service /lib/systemd/system/named.service

fi

if [ -f /lib/systemd/system/bind9-resolvconf.service ]; then

/usr/bin/mv /lib/systemd/system/bind9-resolvconf.service /lib/systemd/system/named-resolvconf.service

fi

if [ -f /lib/systemd/system/named.service ]; then

/usr/bin/find /lib/systemd/system/named.service -type f -exec sed -i 's|bind9|named|g' {} \;

fi

if [ -f /lib/systemd/system/named.service ]; then

/usr/bin/find /lib/systemd/system/named.service -type f -exec sed -i 's|multi-user.target|named.service|g' {} \;

fi

if [ -f /lib/systemd/system/named-resolvconf.service ]; then

/usr/bin/find /lib/systemd/system/named-resolvconf.service -type f -exec sed -i 's|bind9.service|named.service|g' {} \;

fi

/usr/bin/ln -s /lib/systemd/system/named-resolvconf.service /etc/systemd/system/bind9-resolvconf.service

/usr/bin/ln -s /lib/systemd/system/named.service /etc/systemd/system/bind9.service

if [ -f /etc/default/named ]; then

/usr/bin/find /etc/default/named -type f -exec sed -i 's|OPTIONS="-u bind"|OPTIONS="-u bind -4"|g' {} \;

/usr/bin/find /etc/default/named -type f -exec sed -i 's|OPTIONS="-4 -u bind"|OPTIONS="-u bind -4"|g' {} \;

fi

/usr/bin/systemctl daemon-reload

Display More

HowTo: I-MSCP 1.5.3 installation on Debian 10

Share

Daily visitors