upgrading from 3.0 to 3.3

Thomas Spuhler thomas.spuhler at btspuhler.com
Thu Jan 15 02:43:47 CET 2015


On Monday, December 29, 2014 03:29:39 PM Thomas Spuhler wrote:
> On Wednesday, November 19, 2014 12:16:09 PM Torsten Grote wrote:
> > On 11/19/2014 06:14 AM, Thomas Spuhler wrote:
> > > I do have this line:
> > > $config['db_dsnw'] = 'mysqli://roundcube:pwd@localhost/roundcube';
> > 
> > Can you connect with this credentials to the mysql server running at
> > localhost?
> > 
> > > ERROR 1007 (HY000) at line 1: Can't create database 'roundcube';
> > > database exists
> > > ERROR 1050 (42S01) at line 8: Table 'session' already exists
> > 
> > That's because the database already exists.
> > 
> > > ERROR 1217 (23000) at line 10: Cannot delete or update a parent row: a
> > > foreign key constraint fails
> > 
> > That might hint at a problem with your database, but might as well be
> > due to the fact of the database already existing.
> > 
> > Kind Regards,
> > Torsten
> 
> After the mariadb package is now fixed in cauldron, I tried another round. I had to make the ldap
> log file world writeable and all looks fine in the logs. It found the user in the ldap database.
> But I found now in the journal two issues:
> The first one is a kolab/suhosin bug, but it's only a warning. The second one is probably the real
> problem, the < tlsv1 alert unknown ca in SSL_accept() -> fail>
> 
> Dec 29 14:54:29 vbox.btspuhler.com suhosin[12193]: ALERT - ASCII-NUL
> chars not allowed within request variables - dropped variable '_url'
> (attacker '127.0.0.1', file '/usr/share/roundcubemail/index.php')
> Dec 29 14:54:29 vbox.btspuhler.com suhosin[12193]: ALERT - dropped 1
> request variables - (0 in GET, 1 in POST, 0 in COOKIE) (attacker
> '127.0.0.1', file '/usr/share/roundcubemail/index.php')
> Dec 29 14:54:29 vbox.btspuhler.com imap[17780]: accepted connection
> Dec 29 14:54:29 vbox.btspuhler.com cyrus-master[17890]: about to exec
> /usr/lib/cyrus-imapd/imapd
> Dec 29 14:54:29 vbox.btspuhler.com imap[17890]: SQL backend defaulting
> to engine 'mysql'
> Dec 29 14:54:29 vbox.btspuhler.com imap[17890]: executed
> Dec 29 14:54:29 vbox.btspuhler.com imap[17780]: imapd:Loading hard-coded
> DH parameters
> Dec 29 14:54:30 vbox.btspuhler.com imap[17780]: tlsv1 alert unknown ca
> in SSL_accept() -> fail
> Dec 29 14:54:30 vbox.btspuhler.com imap[17780]: STARTTLS negotiation
> failed: vbox.btspuhler.com [127.0.0.1]
> Dec 29 14:54:30 vbox.btspuhler.com imap[17780]: Connection reset by
> peer, closing connection

I am still working on this and I think I am honing in on the problem:
I upgraded everything but not:
Roundcubemail
php (to php2.6)

and I have not problem to login. After updating php, I get the following error in the journalctl  
httpd.service
Jan 14 17:59:41 vbox.btspuhler.com suhosin[4907]: ALERT - ASCII-NUL
chars not allowed within request variables - dropped variable '_url'
(attacker '127.0.0.1', file '/usr/share/roundcubemail/index.php')
Jan 14 17:59:41 vbox.btspuhler.com suhosin[4907]: ALERT - dropped 1
request variables - (0 in GET, 1 in POST, 0 in COOKIE) (attacker
'127.0.0.1', file '/usr/share/roundcubemail/index.php')

Has anybody else experienced this. Looks like a roundcube error?

-- 
Best regards
Thomas Spuhler

All of my e-mails have a valid digital signature
ID 60114E63
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.kolab.org/pipermail/users/attachments/20150114/22233a3b/attachment.sig>


More information about the users mailing list