store | blogs | forums | twitter | facebook | wiki | mailing lists | downloads | support portal
Atomic Secure Linux
It is currently Wed May 22, 2013 2:51 am

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic Share/Bookmark  [ 19 posts ]  Go to page 1, 2  Next
Author Message
 Post subject: After PHP 5.2.9 update having webmail delivery issue.
Unread postPosted: Tue Mar 03, 2009 2:22 pm 
Offline
Forum Regular
Forum Regular

Joined: Mon Apr 14, 2008 8:29 am
Posts: 278
Location: Rhode Island
Anyone having problems with Horde/Webmail sending emails out?

After updating this morning to 5.2.9 thru atomic i've been getting beat up with phone calls that customers can recieve email's but sent emails are not being delivered.

I went into a test Domain that is on this box and verified that thru Webmail if i send something it gives no error and does show up in the sent-mail box.

But nothing seems to be delivered and i cc'd about 6 email address's across multible domains even sent one to my home email address thru Cox Communications and never recieved it. Also the queue is empty so does'nt seem to be stuck anywhere from what i can tell.


Top
 Profile  
 
 Post subject: Re: After PHP 5.2.9 update having webmail delivery issue.
Unread postPosted: Tue Mar 03, 2009 3:40 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin

Joined: Wed Dec 31, 1969 8:00 pm
Posts: 7425
Location: earth
Anything useful in the logs? You could try setting /etc/php.ini to display_errors too


Top
 Profile  
 
 Post subject: Re: After PHP 5.2.9 update having webmail delivery issue.
Unread postPosted: Tue Mar 03, 2009 4:46 pm 
Offline
Forum Regular
Forum Regular

Joined: Mon Apr 14, 2008 8:29 am
Posts: 278
Location: Rhode Island
Yup,
Checked all the logs i could think of and did'nt see anything abnormal also when i did the test i turned error reporting on and i got no error.

I can verify that going direct thru SMTP with outlook or anything else seems to work it's just when in horde.


Top
 Profile  
 
 Post subject: Re: After PHP 5.2.9 update having webmail delivery issue.
Unread postPosted: Tue Mar 03, 2009 5:22 pm 
Offline
Forum Regular
Forum Regular

Joined: Mon Oct 29, 2007 6:51 pm
Posts: 606
did you update asl at the same time? There are a couple of functions that asl disables that may be needed by horde.


Top
 Profile  
 
 Post subject: Re: After PHP 5.2.9 update having webmail delivery issue.
Unread postPosted: Tue Mar 03, 2009 5:28 pm 
Offline
Forum Regular
Forum Regular

Joined: Mon Apr 14, 2008 8:29 am
Posts: 278
Location: Rhode Island
hostingguy wrote:
did you update asl at the same time? There are a couple of functions that asl disables that may be needed by horde.



Yup, after the update ran asl -u , then rebooted and ran asl -s -f .

I'm using php warn only for PHP function of ASL but i had already known about the "popen" issue with horde so it is allowed so not to interfer with horde.

Horde does process the emails and they do go to the sent-email box but it seems that they are not sent outbound for some reason. And if i check the queue there's nothing sitting there or held up.

This has got me stumped.


Top
 Profile  
 
 Post subject: Re: After PHP 5.2.9 update having webmail delivery issue.
Unread postPosted: Tue Mar 03, 2009 5:46 pm 
Offline
Forum Regular
Forum Regular

Joined: Thu Oct 26, 2006 11:56 pm
Posts: 665
Are you sure in asl your allowing:

ALLOW_escapeshellcmd="yes"
ALLOW_popen="yes"

It will not work with out BOTH being enabled.

Also what OS are you running?


Top
 Profile  
 
 Post subject: Re: After PHP 5.2.9 update having webmail delivery issue.
Unread postPosted: Tue Mar 03, 2009 7:27 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3245
Location: Chantilly, VA
This sounds like a PHP issue. 5.2.9 includes syntax changes, so check your error logs to see if there are any PHP errors.

In logical terms too this sounds like a PHP issue, if everything was working until you upgraded to PHP 5.2.9 it stands to reason that the upgrade to PHP is the likely culprit. Try rolling back to 5.2.8 or whatever version you were running and see what happens. 5.2.9 definitely includes changes in the PHP syntax - its a language afterall and its changing so if you upgrade its not too surprising that something might break.

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: After PHP 5.2.9 update having webmail delivery issue.
Unread postPosted: Tue Mar 03, 2009 7:56 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin

Joined: Wed Dec 31, 1969 8:00 pm
Posts: 7425
Location: earth
Also I'd try sending to a local mailbox on the system, and a remote one. Just to rule out it being something network related.

Followup: I just confirmed that Horde works with php 5.2.9 on C4


Top
 Profile  
 
 Post subject: Re: After PHP 5.2.9 update having webmail delivery issue.
Unread postPosted: Wed Mar 04, 2009 1:21 am 
Offline
Forum Regular
Forum Regular

Joined: Tue Jul 15, 2008 2:38 pm
Posts: 704
Location: Sweden
I got exactly the same error after 5.29. I had previously only allowed popen in my configuration, but after reading aus-citys other thread also started to use ALLOW_escapeshellcmd="yes", which solved the problem.

Thanks aus-city!


Top
 Profile  
 
 Post subject: Re: After PHP 5.2.9 update having webmail delivery issue.
Unread postPosted: Wed Mar 04, 2009 7:44 am 
Offline
Forum Regular
Forum Regular

Joined: Mon Apr 14, 2008 8:29 am
Posts: 278
Location: Rhode Island
Thanks guys,
All set that was the issue, for some reason i did have ALLOW_escapeshellcmd="yes" set but for some reason it was'nt working. So i rebooted ran asl -s -f and wamm-o it started working again.

Thanks aus-city for the heads up.


Top
 Profile  
 
 Post subject: Re: After PHP 5.2.9 update having webmail delivery issue.
Unread postPosted: Wed Mar 04, 2009 3:16 pm 
Offline
Forum Regular
Forum Regular

Joined: Sat Aug 12, 2006 8:14 am
Posts: 117
hi
i had the problem too.
after a asl -r -f and a reboot i have the same error.
i can write email in the webmail, sent it and i see it in sent-mail, but the email is not delivered...
i had to remove manualy escapeshell from the disabled functions in php.ini

now its okay!

thanks guys

greets
zek


Top
 Profile  
 
 Post subject: Re: After PHP 5.2.9 update having webmail delivery issue.
Unread postPosted: Wed Mar 04, 2009 6:00 pm 
Offline
Long Time Forum Regular
Long Time Forum Regular

Joined: Sat Aug 20, 2005 9:30 am
Posts: 2812
Location: The Netherlands
Yeah, escapeshellcmd was added to the PHP checks in ASL 2.0.7 and if you hadn't yet ran 'asl -s -f' after upgrading to that version, then escapeshellcmd wasn't disabled in /etc/php.ini yet. I found out that Horde needs escapeshellcmd (and fails silently without it!) a couple of days ago and modified the ASL FAQ accordingly.

As far as I'm concerned there is absolutely no harm in allowing escapeshellcmd as it's not a function that executes code. It's a function that takes a string and returns an escaped string, so I found it kind of silly that it's getting disabled by default, especially since it breaks Horde.

_________________
Lemonbit Internet Dedicated Server Management


Last edited by breun on Wed Mar 04, 2009 6:03 pm, edited 1 time in total.

Top
 Profile  
 
 Post subject: Re: After PHP 5.2.9 update having webmail delivery issue.
Unread postPosted: Wed Mar 04, 2009 6:02 pm 
Offline
Forum Regular
Forum Regular

Joined: Mon Oct 29, 2007 6:51 pm
Posts: 606
not so much that horde requires it, popen requires it.

Quote:
http://us3.php.net/manual/en/features.safe-mode.functions.php
popen() You can only execute executables within the safe_mode_exec_dir. For practical reasons it's currently not allowed to have .. components in the path to the executable. escapeshellcmd() is executed on the argument of this function.


Top
 Profile  
 
 Post subject: Re: After PHP 5.2.9 update having webmail delivery issue.
Unread postPosted: Wed Mar 04, 2009 6:50 pm 
Offline
Forum Regular
Forum Regular

Joined: Tue Aug 05, 2008 5:01 pm
Posts: 108
After the upgrade i got a lot of this errors, on my httpd/error_log

PHP Fatal error: Can't load Horde/SessionObjects.php, open_basedir restriction. in /usr/share/psa-horde/lib/Horde/IMAP/Tree.php on line 311

And also i am unable to access phpbb 3 forum installed on my server recently.


Top
 Profile  
 
 Post subject: Re: After PHP 5.2.9 update having webmail delivery issue.
Unread postPosted: Wed Mar 04, 2009 7:13 pm 
Offline
Forum User
Forum User

Joined: Thu Feb 12, 2009 8:53 pm
Posts: 80
Location: Mexico
I used the solution of editing
/etc/asl/config
and modifying

ALLOW_escapeshellcmd="yes"
ALLOW_popen="yes"

and then running

asl -s -f

that fixes the issue, but I was trying to use a more granular approach.

I am running Plesk 9 so I modified

/etc/httpd/conf.d/zzz_horde_vhost.conf

and added the lines about php_admin_value disable_functions as follows.

<Directory /usr/share/psa-horde>
<IfModule sapi_apache2.c>
php_admin_flag engine on
php_admin_flag magic_quotes_gpc off
php_admin_flag safe_mode off

php_admin_value open_basedir "/usr/share/psa-horde:/etc/psa/webmail/horde:/etc/psa:/tmp:/var/tmp:/var/log/psa-horde:/usr/share/doc:/usr/share/psa-pear"
php_admin_value include_path "/usr/share/psa-horde:/usr/share/psa-horde/lib:/usr/share/psa-pear:."
php_admin_value disable_functions "dl , exec , passthru , pfsockopen , posix_kill , posix_mkfifo , posix_setuid , proc_close , proc_open , proc_terminate , shell_exec , system , leak , posix_setpgid , posix_setsid , proc_get_status , proc_nice , show_source"
</IfModule>

<IfModule mod_php5.c>
php_admin_flag engine on
php_admin_flag magic_quotes_gpc off
php_admin_flag safe_mode off

php_admin_value open_basedir "/usr/share/psa-horde:/etc/psa/webmail/horde:/etc/psa:/tmp:/var/tmp:/var/log/psa-horde:/usr/share/doc:/usr/share/psa-pear"
php_admin_value include_path "/usr/share/psa-horde:/usr/share/psa-horde/lib:/usr/share/psa-pear:."
php_admin_value disable_functions "dl , exec , passthru , pfsockopen , posix_kill , posix_mkfifo , posix_setuid , proc_close , proc_open , proc_terminate , shell_exec , system , leak , posix_setpgid , posix_setsid , proc_get_status , proc_nice , show_source"
</IfModule>
</Directory>

Then restarted apache.

I also added temporarily a
phpinfo()
to
/imp/compose.php

so that I could take a look a the value for disable_functions
disable_functions
Local
dl , exec , passthru , pfsockopen , posix_kill , posix_mkfifo , posix_setuid , proc_close , proc_open , proc_terminate , shell_exec , system , leak , posix_setpgid , posix_setsid , proc_get_status , proc_nice , show_source

Global
dl , exec , escapeshellcmd , passthru , pfsockopen , popen , posix_kill , posix_mkfifo , posix_setuid , proc_close , proc_open , proc_terminate , shell_exec , system , leak , posix_setpgid , posix_setsid , proc_get_status , proc_nice , show_source

as you can see the values are correct but I cannot send email using this configuration.

Any idea why?

Thanks for your help.

_________________
Red Hat Enterprise Linux Server release 6.2 (Santiago)
Plesk psa-10.4.4-rhel6.build1013111102.18.x86_64
ASL asl-3.0.22-1.el6.art.x86_64
Linux 2.6.32-220.7.1.el6.x86_64 #1 SMP
Intel(R) Xeon(R) CPU E5430 @ 2.66GHz - 8 GB RAM - 2 250GB SATA HDD


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic Share/Bookmark  [ 19 posts ]  Go to page 1, 2  Next

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group