webmin / webmin

Powerful and flexible web-based server management control panel

 

 

Documentation   |   FAQ   |   Security   |   Screenshots   |   Forum

 

---

 

• Changelog
• About
• Installation
• Development
• License

About

Webmin is a web-based system administration tool for Unix-like servers, and services with about 1,000,000 yearly installations worldwide. Using it, it is possible to configure operating system internals, such as users, disk quotas, services or configuration files, as well as modify, and control open-source apps, such as BIND DNS Server, Apache HTTP Server, PHP, MySQL, and many more.

Usability can be expanded by installing modules, which can be custom made. Aside from this, there are two other major projects that extend its functionality:

• Virtualmin is a powerful, flexible, most popular, and most comprehensive web-hosting control panel for Linux, and BSD systems, with over 150,000 installations worldwide. It is available in an open-source community-supported version, and a more feature-filled version with premium support;
• Usermin presents and controls a subset of user-centred features, rather than administrator-level tasks.

Webmin includes 116 standard modules, and there are at least as many third-party modules.

Requirements

Perl 5.10 or higher.

Installation

For detailed installation instructions check our guide on webmin.com/download page.

Development

Lead developer

• Jamie Cameron

Developers

• Ilia Rostovtsev
• Joe Cooper

Contributors

• Kay Marquardt
• Nawawi Jamili
• unknown10777 + 90 more..

License

Webmin is released under the BSD License.

webmin's Issues

new filemanager

make a new filemanager with:

• multiupload
• drag & drop

Systemd service cannot be created unless a command is given

I am having an issue with the Bootup and Shutdown module with Systemd on openSUSE 13.1.

I clicked selected the rsyncd.service and clicked Disable on Boot. This properly disabled the service by executing the command:

systemctl disable rsyncd\.service

However, when I try to do the inverse: select rsyncd.service and click Start on Boot, I get the error message:

Systemd service rsyncd.service cannot be created unless a command is given

Memory for SmartOS Instances should use the kstat for the memory cap

Should use the following to get the physical memory available to a SmartOS instance vs showing the RAM in the physical chassis:

kstat -c zone_memory_cap -s physcap -p | cut -f2 | awk '{ print $1 }'

Invalid HTTP header in HTTP Tunnel module

I think a '\r' is missing at line 82 in link.cgi:

https://github.com/webmin/webmin/blob/master/tunnel/link.cgi#L82

so the Webmin-servers header is malformed and some webservers (like lighttpd) didn't respond to the request.

Webmin vulnerable aginst ssl heartbeat attack

i checked my webmin installation with these script.
https://github.com/noxxi/p5-scripts/blob/master/check-ssl-heartbleed.pl
The result was that the webserver implementet in Webmin is vulnureable aginst the heartbeat attack on ssl. I run the latest version (1.680) and use the buildin webserver.

File Manager: recursion type 3 and 4 not working

Hi, I'm having an issue with the File Manager.

Steps to reproduce:

1. Open File Manager
2. Select a directory
3. Click Info
4. Select different file permissions
5. Select one of the following recursion options in Apply changes to:
   * Files under this directory and subdirectories (rec=3)
   * This directory and all subdirectories (rec=4)
6. Click Save

Applying changes in this way has no effect. The other recursion types work fine.

I tested this on a Debian system and a CentOS system, using Webmin version 1.660 on both. There doesn't seem to be any error in Webmin's log files. Let me know if I can provide any other useful information.

ot

module exports and exports-nfs4 help error

Hello

In exports module there is 4 missing help files when trying to add or edit an export.
NFS Version => /usr/libexec/webmin/exports/help/vers.html
NFSv4 Pseudofilesystem to export => /usr/libexec/webmin/exports/help/pfs.html
(with or without Authentication) => /usr/libexec/webmin/exports/help/auth.html
Security level => /usr/libexec/webmin/exports/help/sec.html

In exports module there is 4 missing help files when trying to add or edit an export.
NFS Version => /usr/libexec/webmin/exports-nfs4/help/vers.html
Bind to => /usr/libexec/webmin/exports-nfs4/help/in.html

Also there is a bug when saving edit_export.cgi in exports-nfs4 module
"Clients must be on secure port?" and "Hide the filesystem?" values considedred are the opposite of what have put.

Cluster Webmin Server Upgrade 404

In 1.610 when you go to "Cluster Webmin Servers" and click on "Upgrade Webmin" it takes you to a page that says ": HTTP/1.1 404 Not Found"

Webmin does not listen on multiple ports

I have Webmin v1.530 installed on Debian 5. I also have Virtualmin 3.82 GPL installed.

I have done some updates on Virtualmin modules and after the updates were installed, Webmin stopped responding on the secondary port I have set up.

I have both ports 8443 and 60410 set up under Webmin - Webmin Configuration - Ports and Addresses
I tested this by swapping both ports in the list of ports to listen on, and only the very first port is taken. I have also tried to add several other ports, but only the first port will show up in a 'netstat -tan'. I always have them listen on all addresses.

This is kind of a blocking problem atm as I have other webmin servers communicating with each other over the 60410 port and end users going to port 8443. Firewalls are set up to handle the 60410 port, not the 8443 port.

I'm not entirely sure if this is a Virtualmin case or not, but I do know the problem started when I updated Virtualmin.

Kind regards,

Sven Meeus
[email protected]

How do I use Java client through XML call webmin module functions?

I through the url:http://root:[email protected]:10000/xmlrpc.cgi
interview results returned to
faultStringInvalid XML : no element found at line 1, column 0, byte -1 at /usr/local/lib64/perl5/XML/Parser.pm line 187faultCode4
What should I do?

Accents and stuff

2 issues in 1 screenshot.
http://i.imgur.com/L5ZuK.png

1-Some unnecessary escaping (I think) in apache module in 'automatic' word (everywhere else is fine) (can be seen in Spanish translation)
I think this was what this user was talking about:
http://sourceforge.net/tracker/?func=detail&aid=1925628&group_id=17457&atid=117457
2-Webmin can't properly print accents in filenames, usernames, etc. Everywhere (except in translations) 'á' goes to "á", etc
I think this has to do with
http://sourceforge.net/tracker/?func=detail&aid=3010432&group_id=17457&atid=117457

Take advantage of public key authentication to improve login security

I have a server running Webmin and Virtualmin, however one small gripe I have is that enabling an SSH server with public key authentication and disabling password authentication is essentially defeated by enabling Webmin since it only allows password authentication and provides many functions that a user could do to authenticate themselves with full SSH access (such as a file manager for basic users and editing the sshd_conf file for root). Because of this, I usually have Webmin disabled and enable it only when I want to use it. It would be nice if we could somehow make use of the public key authentication system already in place in order to authenticate users through Webmin/Virtualmin.

Here are a couple of ideas I came up with how this could be accomplished.

1. Make the user upload the public key to the server using the browser.
   We would need to use some tricky Javascript (tricky for me anyway) that would allow the user to select their private key from their file system and, using the passphrase, generate the respective public key client-side and send it to the server along with their username. Alternatively, the user could copy/paste the contents of their public key into the browser if the above method wouldn't be feasable. The public key would then be authenticated as it is in SSH connections.

2. Require a single use token generated by SSH.
   This would be a bit more inconvenience for the user, however in order to log in to Webmin, they first need to log in by SSH and generate a single use token by executing a script on the server. This could be stored in a database, in the filesystem or in memory. Of course, they would need to be kept secure (readable only by root), they would need to have some sort of reasonable expiration time and should probably be limited to one per user. The user would then log in using their username and the token.

Any thoughts?

MAGEIA Config

Congratulations for the work you do with webmin.

Mageia is the fork of Mandriva, and the configurations of webmin don't run on mageia, please can you add mageia to the suported SO. the paths should be the same of mandriva.

thanks

CIFS Network Filesystems: nounix, file_mode and dir_mode

Since cifs-utils package version 4.0 was released in 2010, the fmask and dmask flags on remote CIFS mounts saved to /etc/fstab have been deprecated in favor of file_mode and dir_mode.

Webmin currently still writes fmask and dmask when setting the "User files are owned by" and "Group files are owned by" during creation or editing a CIFS mount.

Webmin also complains when setting these values to the required 4-digit octal notation e.g. 0775

Would it be possible to update these?

It would also be cool to add the nounix option ("Ignore Unix permissions") which is helpful if the CIFS server is actually running Samba and exporting incompatible permissions.

Please let me know if I can provide any other useful information.

Webmin Version 1.680 breaks Dansguardian Version 2.10.1.1

Upgrading Webmin to 1.68 from the previous version breaks "View/Edit A Filter Group's Lists". I have verified this on 2 separate servers.

Broken reverse DNS update

Hi Jamie,

In commit 896e06c it looks like you've fixed the problem where reverse DNS entries are not correctly added or deleted. This has been biting us for a while and i stepped through the code this morning, found the issue and your fixed, and noticed that 1.610 doesn't have that commit included. Is this going to be released soon?

Thanks,
Paul

chrooted postfix and saslauthd run into problems in Debian 7

Hello

Seems the current deployed configuration is not compatible when enabling chroot on Postfix, resulting such these errors:

postfix/smtpd[8673]: connect from [127.0.0.1]
postfix/smtpd[8673]: warning: SASL authentication failure: cannot connect to saslauthd server: No such file or directory
postfix/smtpd[8673]: warning: [127.0.0.1]: SASL LOGIN authentication failed: generic failure
postfix/smtpd[8673]: disconnect from [127.0.0.1]

The problem arises because postfix insists on looking up saslauthd lock files in /var/run/saslauthd, yet these have moved to /var/spool/postfix/var/run/saslauthd.

Even after adding:
saslauthd_path: /var/spool/postfix/var/run/saslauthd/mux
or
saslauthd_path: /var/run/saslauthd/mux
to /etc/postfix/sasl/smtpd.conf the problem persists (tried remote SMTP mail clients and roundcube).

You may say, this can be fixed with a symlink or mount bind - this is partially true and will work until the next reboot. Then the system clears /var/run and new directory has to be created with respective symlink or mount bind. Permanent entry in /etc/fstab still won't solve it and you'l end up with a boot hang (press ctrl+d).

Instead of chrooting saslauthd, the fix seems to be leave it at default path, and then changing the /etc/default/saslauthd options accordingly. This hovewer leaves saslauthd out of the chroot, so a mount bind will be required.

SEE LAST POSTS FOR FINAL FIXES

Note that Symlinks do not work on chroot. The following method is inefective - you'l have to use a mount bind.

Create directory for new mount point:
mkdir -p /var/spool/postfix/var/run
Set ownership and permissions:

chown -R root:sasl /var/spool/postfix/var/
dpkg-statoverride --add root sasl 710 /var/spool/postfix/var
adduser postfix sasl

Create symlink for chrooted saslauthd:

ln -s  /var/run/saslauthd /var/spool/postfix/var/run/saslauthd
chown -h root:sasl /var/spool/postfix/var/run/saslauthd

These also won't work because the symlinks are reversed:
http://blog.wains.be/2006/11/18/postfix-chroot-sasl-authentication-saslauthd/
http://www.jimmy.co.at/weblog/?p=52

Deprecated MySQL syntax

Virtualmin and Webmin does not handle correctly MySQL 5.6.10 and has a deprecated SQL syntax on adding database and does not let to install phpMyAdmin.

webmin log since upgrade to 1.670

Hi

This is my log since upgraded to 1.670

[14/Jan/2014:14:33:59 +0100] miniserv.pl started
[14/Jan/2014:14:33:59 +0100] Using MD5 module Digest::MD5
[14/Jan/2014:14:33:59 +0100] PAM authentication enabled
Use of uninitialized value in split at /usr/share/webmin/acl/acl-lib.pl line 47.
Subroutine list_users redefined at /usr/share/webmin/acl/acl-lib.pl line 42.
Subroutine get_user redefined at /usr/share/webmin/acl/acl-lib.pl line 189.
Subroutine list_groups redefined at /usr/share/webmin/acl/acl-lib.pl line 213.
Subroutine get_group redefined at /usr/share/webmin/acl/acl-lib.pl line 322.
Subroutine list_modules redefined at /usr/share/webmin/acl/acl-lib.pl line 335.
Subroutine list_module_infos redefined at /usr/share/webmin/acl/acl-lib.pl line 346.
Subroutine create_user redefined at /usr/share/webmin/acl/acl-lib.pl line 360.
Subroutine modify_user redefined at /usr/share/webmin/acl/acl-lib.pl line 525.
Subroutine add_old_password redefined at /usr/share/webmin/acl/acl-lib.pl line 744.
Subroutine delete_user redefined at /usr/share/webmin/acl/acl-lib.pl line 775.
Subroutine create_group redefined at /usr/share/webmin/acl/acl-lib.pl line 927.
Subroutine modify_group redefined at /usr/share/webmin/acl/acl-lib.pl line 1022.
Subroutine delete_group redefined at /usr/share/webmin/acl/acl-lib.pl line 1128.
Subroutine group_line redefined at /usr/share/webmin/acl/acl-lib.pl line 1230.
Subroutine acl_line redefined at /usr/share/webmin/acl/acl-lib.pl line 1245.
Subroutine can_edit_user redefined at /usr/share/webmin/acl/acl-lib.pl line 1256.
Subroutine open_session_db redefined at /usr/share/webmin/acl/acl-lib.pl line 1285.
Subroutine delete_session_id redefined at /usr/share/webmin/acl/acl-lib.pl line 1313.
Subroutine delete_session_user redefined at /usr/share/webmin/acl/acl-lib.pl line 1333.
Subroutine rename_session_user redefined at /usr/share/webmin/acl/acl-lib.pl line 1358.
Subroutine update_members redefined at /usr/share/webmin/acl/acl-lib.pl line 1386.
Subroutine copy_acl_files redefined at /usr/share/webmin/acl/acl-lib.pl line 1428.
Subroutine copy_group_acl_files redefined at /usr/share/webmin/acl/acl-lib.pl line 1543.
Subroutine copy_group_user_acl_files redefined at /usr/share/webmin/acl/acl-lib.pl line 1561.
Subroutine set_acl_files redefined at /usr/share/webmin/acl/acl-lib.pl line 1583.
Subroutine get_ssleay redefined at /usr/share/webmin/acl/acl-lib.pl line 1621.
Subroutine encrypt_password redefined at /usr/share/webmin/acl/acl-lib.pl line 1643.
Subroutine get_unixauth redefined at /usr/share/webmin/acl/acl-lib.pl line 1665.
Subroutine save_unixauth redefined at /usr/share/webmin/acl/acl-lib.pl line 1686.
Subroutine delete_from_groups redefined at /usr/share/webmin/acl/acl-lib.pl line 1706.
Subroutine check_password_restrictions redefined at /usr/share/webmin/acl/acl-lib.pl line 1726.
Subroutine hash_session_id redefined at /usr/share/webmin/acl/acl-lib.pl line 1795.
Subroutine hash_md5_session redefined at /usr/share/webmin/acl/acl-lib.pl line 1817.
Subroutine md5_perl_module redefined at /usr/share/webmin/acl/acl-lib.pl line 1873.
Subroutine session_db_key redefined at /usr/share/webmin/acl/acl-lib.pl line 1895.
Subroutine setup_anonymous_access redefined at /usr/share/webmin/acl/acl-lib.pl line 1909.
Subroutine join_userdb_string redefined at /usr/share/webmin/acl/acl-lib.pl line 1960.
Subroutine validate_userdb redefined at /usr/share/webmin/acl/acl-lib.pl line 1976.
Subroutine userdb_table_sql redefined at /usr/share/webmin/acl/acl-lib.pl line 2074.
Subroutine check_md5 redefined at /usr/share/webmin/acl/md5-lib.pl line 11.
Subroutine encrypt_md5 redefined at /usr/share/webmin/acl/md5-lib.pl line 29.
Subroutine unix_crypt_supports_md5 redefined at /usr/share/webmin/acl/md5-lib.pl line 117.
Subroutine to64 redefined at /usr/share/webmin/acl/md5-lib.pl line 126.
Subroutine check_sha1 redefined at /usr/share/webmin/acl/md5-lib.pl line 137.
Subroutine encrypt_sha1 redefined at /usr/share/webmin/acl/md5-lib.pl line 145.
Subroutine encrypt_sha1_hash redefined at /usr/share/webmin/acl/md5-lib.pl line 154.
Subroutine check_blowfish redefined at /usr/share/webmin/acl/md5-lib.pl line 162.
Subroutine encrypt_blowfish redefined at /usr/share/webmin/acl/md5-lib.pl line 170.
Subroutine unix_crypt_supports_sha512 redefined at /usr/share/webmin/acl/md5-lib.pl line 194.
Subroutine check_sha512 redefined at /usr/share/webmin/acl/md5-lib.pl line 203.
Subroutine encrypt_sha512 redefined at /usr/share/webmin/acl/md5-lib.pl line 210.
Subroutine validate_password redefined at /usr/share/webmin/acl/md5-lib.pl line 220.
Subroutine is_dictionary_word redefined at /usr/share/webmin/acl/md5-lib.pl line 261.
Use of uninitialized value in split at /usr/share/webmin/acl/acl-lib.pl line 47.
Use of uninitialized value $squid::squid_version in substitution (s///) at /usr/share/webmin/squid/squid-lib.pl line 20.
Use of uninitialized value $squid::squid_version in numeric ge (>=) at /usr/share/webmin/squid/squid-lib.pl line 295.
Use of uninitialized value $squid::squid_version in numeric ge (>=) at /usr/share/webmin/squid/squid-lib.pl line 302.
Use of uninitialized value $squid::squid_version in numeric ge (>=) at /usr/share/webmin/squid/squid-lib.pl line 307.
Use of uninitialized value $squid::squid_version in numeric ge (>=) at /usr/share/webmin/squid/squid-lib.pl line 312.
Use of uninitialized value $squid::squid_version in numeric ge (>=) at /usr/share/webmin/squid/squid-lib.pl line 316.

Use of uninitialized value $squid::squid_version in substitution (s///) at /usr/share/webmin/squid/squid-lib.pl line 20.
Use of uninitialized value $squid::squid_version in numeric ge (>=) at /usr/share/webmin/squid/squid-lib.pl line 295.
Use of uninitialized value $squid::squid_version in numeric ge (>=) at /usr/share/webmin/squid/squid-lib.pl line 302.
Use of uninitialized value $squid::squid_version in numeric ge (>=) at /usr/share/webmin/squid/squid-lib.pl line 307.
Use of uninitialized value $squid::squid_version in numeric ge (>=) at /usr/share/webmin/squid/squid-lib.pl line 312.
Use of uninitialized value $squid::squid_version in numeric ge (>=) at /usr/share/webmin/squid/squid-lib.pl line 316.
Use of uninitialized value in split at /usr/share/webmin/acl/acl-lib.pl line 47.

This last doubled block appears at least each day or so this then.
Has this already been reported?

When saving Webmin users, if the user belongs to a group, the user global ACLs aren't saved

Hello

When editing a webmin user, if it already belongs to a group, webmin won't save the new user global ACLs (Root directory for file chooser, Browse files as Unix user, etc).

I understand these are probably locked from editing on save action, just like the per-module settings.

The problem is that then webmin assumes the user global ACLs, not the group. So if your user was created and left as default with root permissions, putting it on a limited permission group won't do much good.

Therefore, i think the behavior needs to change.

Proposed changes:

• The global ACLs should be changeable in the user account, even if it belongs to a group.
• User settings should be overriden OR override, depending on the setting set for the user.
• These checks for ACLs need a fix to reflect the proposed changes. I'm guessing most modules already read first the Group ACLs, then apply the User ACLs on top of it, so little changes are likely required. It's more of a fix for the user edit form, and with added functionality.

How to:
There could be a "Inherit group ACLs checkbox" to set the behavior for the global ACLs

• checked, would delete the user global ACLs and use the group's and lock all the other fields;
• unchecked, would allow storing different global ACLs for the user and unlock the fields.

All fields should go in a fieldset, save for this checkbox, to improve usability.

Remarks:
For the sake of simplicity, inheriting the per-module group ACLs, but not allowing to change them is a good thing. but new ones could be added to the user, just like it is working now. So the per-module ACLs seem to be fine.

index_ecommand French translation var typo

in webmin/firewall/lang/fr

English version: index_ecommand=The command $1 [...]
French version : index_ecommand=La commande $& [...]
$& appear as text and not command name:

Unknown error - no output produced (when start)

Hi.

Downloaded Webmin, installed the minecraft module.
Downladed package (.jar file) clicked start minecraft server...

Error: Unknown error - no output produced

Then tryed to setup default work and set to active , changing config etc. just keep ketting that error.

Support adding LDAP group with same GID as UID similar to system users and group module

There is currently no way to automatically add a group with same gid as the uid when adding a new user to an LDAP server, even if the system users and group module specifies the option.

LDAP user module should support better hashing support

Just supporting DES is not fantastic - should rather be using something better like SSHA.

Cronjob for /etc/webmin/status/monitor.pl sends email to root on every run when monitoring disk space/consumption

Every 5 minutes, I get an email sent to root with a usage description for the "mount.cifs" command. Removing all disk space and consumption monitors stops the emails.

I did a bit of digging and this seems to be caused by line 14 of mount/linux-lib.pl with a call to "mount.smbfs", which on my system (Ubuntu Maverick) is a bash wrapper script from Debian that eventually calls mount.cifs (via exec) with the same arguments. The argument "-v" doesn't seem to be expected by mount.cifs (although "-V" is).

For some reason the output of mount.cifs is being captured by cron and emailed. A simple solution would be to pipe the output of the cronjob to /dev/null but, assuming the output is meant to be captured by the Perl script, that'd just hide the underlying problem.

Chroot directory for entire file manager doesn't work in 1.670

In Webmin->Webmin->Webmin Users, click on the username. Find File Manager in the list of modules. Edit "Chroot directory for entire file manager" and set it to /home/username. In 1.610 it works, in 1.670 the settings are not saved.

The problem is that in 1.670 the links in the list of modules are generated like this:

https://*:10000/acl/edit_acl.cgi?mod=file&group=

while in 1.610 the links are generated like this:

https://*:10000/acl/edit_acl.cgi?mod=file&user=wmtest

So in 1.670 edit_acl.cgi doesn't get the user info.

The error log has a lot of messages like the following:

Use of uninitialized value in split at /usr/libexec/webmin/acl/edit_user.cgi line 280.
Use of uninitialized value $user{"days"} in string eq at /usr/libexec/webmin/acl/edit_user.cgi line 286.
Use of uninitialized value in split at /usr/libexec/webmin/acl/edit_user.cgi line 293.
Use of uninitialized value in split at /usr/libexec/webmin/acl/edit_user.cgi line 294.
Use of uninitialized value $user{"hoursfrom"} in string eq at /usr/libexec/webmin/acl/edit_user.cgi line 295.
Use of uninitialized value $cats[6] in sort at /usr/libexec/webmin/acl/edit_user.cgi line 344.
Use of uninitialized value in string eq at /usr/libexec/webmin/acl/edit_user.cgi line 345.
Use of uninitialized value in concatenation (.) or string at /usr/libexec/webmin/acl/edit_user.cgi line 364.
Use of uninitialized value in concatenation (.) or string at /usr/libexec/webmin/acl/edit_user.cgi line 346.

BIND: invalid chroot detection wrong w/split DNS

After upgrading to 1.670, my BIND module is now getting the error message: "Warning : The chroot directory /var/named/chroot that Webmin thinks BIND is using may be incorrect. The zone files for 970 domains could not be found."

This is bind97-9.7.0-17.P2.el5_9.2 on RHEL 5.10.

The chroot directory is correct and the zones seem to be found and working as expected. What might be unusual, however, is that most of my zone files are shared between two views. I have only 485 zones but 2 views.

I have enabled debug logging but I do not see anything particularly notable in the output:

1441 [21/Jan/2014 13:25:58.775794] wcooley x.x.x.x bind8 WRITE "/etc/webmin/bind8/version"
1441 [21/Jan/2014 13:25:58.776894] wcooley x.x.x.x bind8 CLOSE "/etc/webmin/bind8/version"
1441 [21/Jan/2014 13:25:58.777217] wcooley x.x.x.x bind8 READ "/etc/selinux/config"
1441 [21/Jan/2014 13:25:58.790974] wcooley x.x.x.x bind8 READ "/etc/webmin/bind8/zone-names"
1441 [21/Jan/2014 13:25:58.970299] wcooley x.x.x.x bind8 READ "/etc/webmin/bind8/zone-names"
1441 [21/Jan/2014 13:25:58.977319] wcooley x.x.x.x bind8 WRITE "/etc/webmin/bind8/zone-names"
1441 [21/Jan/2014 13:25:58.981223] wcooley x.x.x.x bind8 CLOSE "/etc/webmin/bind8/zone-names"
1441 [21/Jan/2014 13:25:59.023051] wcooley x.x.x.x bind8 READ "/usr/libexec/webmin/man/module.info"
1441 [21/Jan/2014 13:25:59.085095] wcooley x.x.x.x bind8 READ "/etc/sysconfig/network"
1441 [21/Jan/2014 13:25:59.508789] wcooley x.x.x.x - UNLINK "/etc/webmin/bind8/version.webmintmp.1441"
1441 [21/Jan/2014 13:25:59.509190] wcooley x.x.x.x - UNLINK "/etc/webmin/bind8/zone-names.webmintmp.1441"
1441 [21/Jan/2014 13:25:59.509489] wcooley x.x.x.x - STOP "runtime=1"

Creating NFS 4 shares unavailable when no exports are active

When trying to create NFS exports on Linux (NFS kernel server), Webmin defaults to creating NFS v3 shares, even when NFS v4 support is present. Creating NFS v4 shares becomes available when the server is running (at least one export is active).

Steps to reproduce:

1. Go to Networking | NFS Exports
2. Disable all exports
3. Click 'Apply Changes'
4. Click Add a new export.

You will see a screen which allows you to create an export, but only using NFS v3.

Tested in Webmin 1.660 on Debian and CentOS.
Please let me know if I can provide any other useful information.

Virtualmin repository

I have tried to find virtualmin repository but I'm not able to find it. I have looked into webmin website and on webmin repository with no luck.

I don't know if I had missed it or is not available.

Can someone point me to virtualmin source code. I would like to share some code, if not already done -without checking developed version I can't be sure it is already on code-

Thanks.

Username regexp checking is not checked when adding new users

When adding users the username regular expression checking is only checked on bulk user additions. Adding a single user at a time via the useradmin, ldap-useradmin, and virtualmin do not check for usernames against the regexp. However adding regexp seems to not work correctly from within webmin.

using a regexp of (a-z?) for username_re seems to not allow usernames like "john" on webmin 1.550.

Modifications to the Debian packaging?

Hi, Jamie.

I see that you provide Debian packages and I see that the packaging could be updated. Would you accept some patches to fix some of the most obvious issues with the generated packages?

There are things ranging from minor stylistic points to some more serious issues that may interfere with other parts of the system and break upgrades of the rest of the system.

Regards, Rogério Brito.

Webmin Users & Groups over LDAP: Can't use an undefined value as an ARRAY reference at ./acl-lib.pl line 1082.

Hello

I've setup Webmin to work with an OpenLDAP server.
I've loaded the LDIF conversion of the schema and i'ts all working apparently, as i was able to create a group.

Howeve, when i go back to editing the group, to change the ACLs (user chooser for example), Webmin crashes with this error:
Can't use an undefined value as an ARRAY reference at ./acl-lib.pl line 1082.

The same error is also triggered when creating a user.

I'm guessing it isn't creating the child objects and attributes (webminAcl and webminAclEntry) correctly.

Meanwhile, can you provide a sample complete webminUser so i can manually populate the directory?

I managed to create a complete (i think) webminGroup and bare webminUser (just modules and ACLs)

Thanks and good work!

PS: here's a sample of webminUser and webminGroup

wheel, WebminAuth, example.org

dn: cn=wheel,ou=WebminAuth,dc=example,dc=org
objectClass: webminGroup
cn: wheel

global, wheel, WebminAuth, example.org

dn: cn=global,cn=wheel,ou=WebminAuth,dc=example,dc=org
cn: global
objectClass: webminAcl
webminAclEntry: root=/
webminAclEntry: otherdirs=
webminAclEntry: nodot=0
webminAclEntry: fileunix=root
webminAclEntry: uedit_mode=4
webminAclEntry: uedit=500
webminAclEntry: uedit2=10000
webminAclEntry: gedit_mode=4
webminAclEntry: gedit=500
webminAclEntry: gedit2=10000
webminAclEntry: feedback=2
webminAclEntry: rpc=2
webminAclEntry: negative=0
webminAclEntry: readonly=0
webminAclEntry: webminsearch=1

testuser, WebminAuth, example.org

dn: cn=testuser,ou=WebminAuth,dc=example,dc=org
objectClass: webminUser
cn: testuser
webminPass: x
webminAttr: proto=ldap
webminAttr: id=cn=testuser,ou=WebminAuth,dc=example,dc=org

global, testuser, WebminAuth, example.org

dn: cn=global,cn=testuser,ou=WebminAuth,dc=example,dc=org
cn: global
objectClass: webminAcl
webminAclEntry: root=/
webminAclEntry: otherdirs=
webminAclEntry: nodot=0
webminAclEntry: fileunix=
webminAclEntry: uedit_mode=4
webminAclEntry: uedit=1000
webminAclEntry: uedit2=10000
webminAclEntry: gedit_mode=4
webminAclEntry: gedit=1000
webminAclEntry: gedit2=10000
webminAclEntry: feedback=2
webminAclEntry: rpc=2
webminAclEntry: negative=1
webminAclEntry: readonly=0
webminAclEntry: webminsearch=1

DNS lost after reboot

Hello

Webmin's network configuration module edits /etc/resolv.conf directly instead of configuring DNS via /etc/network/interfaces (resolvconf package). If the system is configured to use the resolvconf mechanism, DNS settings will be lost on reboot.

This is an old bug http://sourceforge.net/p/webadmin/bugs/3391/ but was not fixed. I am configuring dns through webmin but i am loosing it on reboot.

Is there any fix for this?

thank you for response

PostgreSQL granted privileges display incorrectly

I found an issue with the Granted Privileges screen of the PostgreSQL Database Server module. The screen makes it possible to edit grants - sends the appropriate SQL commands to the server, but granted privileges are not displayed correctly. When you enter the Edit Grant screen again only 2 rows are displayed and the username and grants checkboxes are empty.

Tested on:

• PostgreSQL 8.4.18 on CentOS 6.5
• PostgreSQL 9.1.11 on Debian 7

Checkboxes are disabled and empty in Bootup and Shutdown page.

Checkboxes are disabled and empty in Bootup and Shutdown page.

Here is the screenshot: http://i.imgur.com/THQ6u.jpg

This happend after v1.590 and still exist in v1.601

CentOS 6.3 x86_64. Olders are working. (e.g.: 1.580)

Change Apache Vhost Default?

Hi All,

I have a kinda weird request. I was wondering if there was any way to modify the Default Vhost Template at all? I want to not include "Allow from All" for the Directory Directive. Looking through the source, i havent found a way to do this and im wondering if its even possible?

Thanks

Justin

Some file names (e.g. net/config-*-linux) are incompatible with git on windows

Git on windows (msysGit) fails to create files with * in their names.
this may be a git issue. however, it's possible that it would be good to solve this problem in webmin (i.e. put them in a different name in the repo, and have the install procedure rename them, or maybe use different name altogether)

Installed Webmin on Windows Server 2008,but i can't visit it

I have complete installation.Then i visit http://localhost:10000,but can't connect it .
firewall is off
network is ok
no process found about miniserv
perl installed
using WebminInstall.exe install
how can i visit it?

Apache Module Include Config

Newer Apache systems has the virtual hosts in an include at extra/httpd-vhosts.conf and I think you should support the include system with the apache module.

ldap-useradmin module does not autogenerate passwords

To reproduce

1. Set "Generate password for new users" to Yes in module config
2. Create New user -> blank password field

Expected to see the autogenerated password just like useradmin does it.

Rewrite CGI for nginx support

Would it be possible to see some of the modules requiring CGI, such as proc, re-written to be non-CGI so that they will work with nginx without a lot of phony FastCGI setup and fiddling?

If not, a note in the documentation/FAQ would be nice just to highlight that some things won't work (or just have Webmin disable the modules by default). I couldn't figure out why the proc module just kept displaying a connection refused error in Chrome until I ran an strace on Webmin and noticed it was attempting to execute a CGI file.

Use only cn instead of gecos in ldap-usermin

As you can saw in a previous issue (#2494)

http://sourceforge.net/p/webadmin/bugs/2494/

gecos is defined as an IA5 string so it is a problem with non-ASCII names. Instead of remove accents, I purpose only to use cn.

RFC 2307 saids:

An account's GECOS field is preferably determined by a value of the
gecos attribute. If no gecos attribute exists, the value of the cn
attribute MUST be used. (The existence of the gecos attribute allows
information embedded in the GECOS field, such as a user's telephone
number, to be returned to the client without overloading the cn
attribute. It also accommodates directories where the common name
does not contain the user's full name.)

so if attribute cn has a valid value, there is no need to save something in gecos.

I read something similar to that but about displayName few years ago so I allways set cn and displayName but I left gecos empty.

Virtualmin Yum conflict to downgraded version

Virtualmin Yum update upgrades httpd, httpd-devel, httpd-tools and mod_ssl to downgraded version. It must not to appear under update at all.

# yum list installed | grep powerstack
httpd.x86_64                     2.2.24-1                  @powerstack
httpd-devel.x86_64               2.2.24-1                  @powerstack
httpd-tools.x86_64               2.2.24-1                  @powerstack
mod_ssl.x86_64                   1:2.2.24-1                @powerstack

# yum update
Resolving Dependencies
--> Running transaction check
---> Package httpd.x86_64 0:2.2.24-1 will be updated
---> Package httpd.x86_64 1:2.2.15-15.el6.vm.1 will be an update
---> Package httpd-devel.x86_64 0:2.2.24-1 will be updated
---> Package httpd-devel.x86_64 1:2.2.15-15.el6.vm.1 will be an update
---> Package httpd-tools.x86_64 0:2.2.24-1 will be updated
---> Package httpd-tools.x86_64 1:2.2.15-15.el6.vm.1 will be an update
---> Package mod_ssl.x86_64 1:2.2.24-1 will be updated
---> Package mod_ssl.x86_64 2:2.2.15-15.el6.vm.1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package          Arch        Version                     Repository       Size
================================================================================
Updating:
 httpd            x86_64      1:2.2.15-15.el6.vm.1        virtualmin      815 k
 httpd-devel      x86_64      1:2.2.15-15.el6.vm.1        virtualmin      146 k
 httpd-tools      x86_64      1:2.2.15-15.el6.vm.1        virtualmin       69 k
 mod_ssl          x86_64      2:2.2.15-15.el6.vm.1        virtualmin       86 k

Transaction Summary
================================================================================
Upgrade       4 Package(s)

unicode entity utf-8 convert mismatch

Hi

I am using latest Webmin version 1.660 in UTF-8 mode on Wheezy and just wondered why having all these unicode umlauts in my file manager.

I changed the /usr/share/webmin/file/lang/de.UTF-8 file to use real umlauts, which solved my problem.

Then I found this commit ae840b2. There seems to be a problem converting normal lang files with unicode umlauts being auto-generated to correct utf-8 at build time, since they are just clones.

Could any of you check this for the next version please?

Thanks you for the continuous work.

Add support for Linux Mint

Linux Mint is pretty much the same as Ubuntu.

Could you please add support for it on Webmin & Virtualmin?

Providing some information:

• for os_list.txt

# Linux Mint (not filtering version, needs filtering. check http://en.wikipedia.org/wiki/Linux_Mint
Linux Mint      "$1$2"  ubuntu  $1  $etc_issue =~ /Linux Mint*/i

• oschooser.pl and install.sh needs to be adapted to accept Linux Mint.
• apt will select 'ruby' in place of 'irb' and 'rdoc'
• apt will select 'proftpd-basic' in place of 'proftpd'
• 'scponly' needs to be provided for Linux Mint

mintdeps="postfix postfix-pcre webmin usermin ruby libapache2-mod-ruby libxml-simple-perl libcrypt-ssleay-perl unzip zip libfcgi-dev bind9 spamassassin spamc procmail libnet-ssleay-perl libpg-perl libdbd-pg-perl libdbd-mysql-perl quota iptables openssl python mailman subversion ruby ri mysql-server mysql-client mysql-common postgresql postgresql-client awstats webalizer dovecot-common dovecot-imapd dovecot-pop3d proftpd-basic libcrypt-ssleay-perl awstats clamav-base clamav-daemon clamav clamav-freshclam clamav-docs clamav-testfiles libapache2-mod-fcgid apache2-suexec-custom apache2 apache2-doc libapache2-svn libsasl2-2 libsasl2-modules sasl2-bin php-pear php5 php5-cgi libgd2-xpm libapache2-mod-php5 php5-mysql"

• minimal mode

virtualminmeta="virtualmin-base"
# If minimal, we don't install any extra packages, or perform any configuration
if [ "$mode" = "minimal" ]; then
    rhdeps=yastdeps=debdeps=ubudeps=mintdeps=portagedeps=pkgdeps=""
    virtualminmeta=$vmpackages
fi

• install_virtualmin_release() with mint support - something like this:

debian | ubuntu | linuxmint | mint )

(...)

            elif [ $os_type = "linuxmint" || $os_type = "mint" ]; then
                deps=$mintdeps
                case $os_version in
                    15*)
                        repos="virtualmin-precise virtualmin-universal"
                    ;;
                esac

Document where contrib modules go

I've got a super basic hostap module written over at https://github.com/pjz/webmin-modules ; should I continue to maintain it there? Or are you guys interested in it?

my Webmin vulnerable to Heartbleed, according to http://filippo.io/Heartbleed

Webmin on my patched system still exhibits a Heartbleed vulnerability, apparently.

I'm running Webmin 1.680 on Ubuntu 13.04. I updated OpenSSL from source for the Heartbleed bug (so 'openssl version' now replies: OpenSSL 1.0.1g 7 Apr 2014). But when I go to http://filippo.io/Heartbleed and test the URL:port where I access webmin, it gives me a clear Vulnerable message. I have rebooted the entire system, I have stopped and started Webmin repeatedly, but if Webmin is running, I get the Vulnerable message whenever I test.

Is Webmin not using OpenSSL for running under SSL? If not, what is under the hood, and whatever it is it seems to be vulnerable... or am I completely missing something to patch my system? BTW, Webmin is the only SSL enabled server on my system at the moment, I'm not running anything else under OpenSSL to test.

Can't install version 1.650 on Ubuntu or Debian

When I open my Webmin home page on most of the half-dozen servers I manage, I get the following message:

Webmin version 1.650 is now available, but you are running version 1.630.

But clicking the "Upgrade Webmin Now" button just gives me:

No package signature verification done.
Failed to upgrade from www.webmin.com : Not a valid Webmin Debian package file

What's going on? One of the servers offered the upgrade via the standard package management function and this worked fine. So that one is on 1.650 now, while all the others remain on 1.630.

Webmin using incorrect slashes for CIFS

Also it seems Webmin is using incorrect slashes for CIFS. Example:
\example\examp /blah/blah cifs uid=.....etc
when it should be
//example/examp /blah/blah cifs uid=.....etc

Using incorrect slashes prevents CIFS from mounting on next reboot.