This forum uses cookies
This forum makes use of cookies to store your login information if you are registered, and your last visit if you are not. Cookies are small text documents stored on your computer; the cookies set by this forum can only be used on this website and pose no security risk. Cookies on this forum also track the specific topics you have read and when you last read them. Please confirm whether you accept or reject these cookies being set.

A cookie will be stored in your browser regardless of choice to prevent you being asked this question again. You will be able to change your cookie settings at any time using the link in the footer.

Sentora 1.0.0 patch (Centos 6.x Only)
#1
Sentora 1.0.0 patch (Centos 6.x Only)
Affected OS: installer prior to 1.0.2/ Centos 6.x Only
Don't apply to Installer >1.0.2 and Ubuntu 12/7, Centos7

We noticed that CGI module was still loaded by default in centos 6.x installs for sentora and was not disabled in a clean way.

You can easily install patch by downloading patching script:

Code:
https://raw.githubusercontent.com/sentora/sentora-installers/master/centos6_cgi_patch.sh

One line command.

Code:
wget https://raw.githubusercontent.com/sentora/sentora-installers/master/centos6_cgi_patch.sh && bash centos6_cgi_patch.sh


Notice the current installer HAVE been already patched. Only previous installs require this patch.

The patch also disable webdav & some unused modules, feel free either to enable them back or not.


The key is commenting "LoadModule cgi_module modules"

Thanks for 911labs (Patrick, Steven) for bringing up CGI could cause issues.
No support using PM (Auto adding to IGNORE list!), use the forum. 
How to ask

10$ free to start your VPS
Reply
Thanks given by: tkramer
#2
RE: Sentora 1.0.0 patch (Centos 6.x Only)
Typo: P

wget https://raw.githubusercontent.com/sentor...i_patch.sh && bash centos6_cgi_patch.sh
Reply
Thanks given by: Me.B
#3
RE: Sentora 1.0.0 patch (Centos 6.x Only)
(03-27-2015, 08:30 PM)Active8 Wrote: Typo: P

wget https://raw.githubusercontent.com/sentor...i_patch.sh && bash centos6_cgi_patch.sh

Thanks fixed ;-)
No support using PM (Auto adding to IGNORE list!), use the forum. 
How to ask

10$ free to start your VPS
Reply
Thanks given by:
#4
RE: Sentora 1.0.0 patch (Centos 6.x Only)
(03-27-2015, 05:51 PM)Me.B Wrote: Notice the current installer HAVE been already patched. Only previous installs require this patch..

I reinstalled Sentora on CentOS6 30 minuts ago and the LoadModules which the patch disabled were not commented out..
So i still had to apply the patch.


Edit:

This morning i got an email that my server was down with the reason "Port open but incorrect HTTP session", so i looked at the error log from httpd and found this:
Code:
[Sun Mar 29 07:24:09 2015] [error] Module mod_ldap missing. Mod_ldap (aka. util_ldap) must be loaded in order for mod_auth_ldap to function properly Configuration Failed 

But this module was disabled by the installer and this patch..
When i enabled this module and restarted httpd it worked again.

My Sentora DemoMy GithubAuxio Github
Zentora themeS-Type themeCstyleX theme
flat-color-iconssmall-n-flat-icons

Sentora's development takes way too long, so i'm transitioning to HestiaCP.
Reply
Thanks given by:
#5
RE: Sentora 1.0.0 patch (Centos 6.x Only)
Ok will remove it commented
No support using PM (Auto adding to IGNORE list!), use the forum. 
How to ask

10$ free to start your VPS
Reply
Thanks given by:
#6
RE: Sentora 1.0.0 patch (Centos 6.x Only)
After applying this , httpd is stoppped, people dont use this patch or your sentora install will be broken
(tested with a fresh install of sentora)

Or go to /etc/httpd/conf/httpd.conf and uncomment LoadModule ldap_module modules
Reply
Thanks given by:
#7
RE: Sentora 1.0.0 patch (Centos 6.x Only)
Yep already should be patched waiting for the pull to be accepted TGates
No support using PM (Auto adding to IGNORE list!), use the forum. 
How to ask

10$ free to start your VPS
Reply
Thanks given by:
#8
RE: Sentora 1.0.0 patch (Centos 6.x Only)
Done.
-TGates - Project Council

SEARCH the Forums or read the DOCUMENTATION before posting!
Support Sentora and Donate: HERE

Find my support or modules useful? Donate to TGates HERE
Developers and code testers needed!
Contact TGates for more information
Reply
Thanks given by:
#9
RE: Sentora 1.0.0 patch (Centos 6.x Only)
Thanks that would fix it.
No support using PM (Auto adding to IGNORE list!), use the forum. 
How to ask

10$ free to start your VPS
Reply
Thanks given by:
#10
RE: Sentora 1.0.0 patch (Centos 6.x Only)
Hello,
I have install lasted sentora version.Could I need install this path?Or this is option path?
Reply
Thanks given by:


Possibly Related Threads…
Thread Author Replies Views Last Post
Sentora v2.1.0 sitrep TGates 3 1 ,165 10-21-2024, 05:08 PM
Last Post: TGates
Sentora update Information TGates 3 2 ,923 09-19-2024, 11:27 AM
Last Post: jennybaso
Sentora for Developers TGates 1 3 ,041 07-05-2024, 10:08 PM
Last Post: winprofx001

Forum Jump:


Users browsing this thread: 1 Guest(s)