ViciBox v.8.0 Bug Fixes and Issues - Updated Oct 5, 2017

[Kumba]

Well that didn't take long. And on to the first BugFix...


In ViciBox v.8.0.1, there is an experimental MariaDB option enabled which should not be. The failure mode will cause MariaDB to lock up and become unresponsive resulting in a forced exit and crashed tables. The trigger for this is caused by high concurrency load on larger systems, however it is recommended all systems apply this fix. In order to correct this issue you will need to restart the database which will cause an interruption to all production. I would recommend performing step 1 and 2 ahead of time and then prepare to perform step 3 after hours.

Steps to fix:
1) sed -i '/thread_handling=pool-of-threads/d' /etc/my.cnf
2) sed -i 's/thread_pool_size=8/thread_concurrency=8/' /etc/my.cnf
3) service mysql restart

-------------

ViciBox v.8.0.0 does not have properly configured SSL support out of the box like ViciBox v.7. If you are not planning to use the WebRTC phone or SSL connectivity then you do not need to perform this bug fix. In fact, performing this bug-fix incorrectly without understanding what is being fixed can likely cause apache (web server) to not start. Think of this as a missing feature more then a bug. Bottom line is if you do not know if you need SSL then very likely you do not.

If you have your own SSL certificate then you can skip step 5 and just load those onto the server. You'll need to modify the 1111-default-ssl.conf file to point to your SSL certificate. Otherwise you can enter pretty much whatever you want on the prompts for step 5 and it will create a self-signed certificate for you which should only be used for testing purposes.

1) a2enflag SSL
2) cd /etc/apache2/vhosts.d
3) wget http://download.vicidial.com/vicibox/11 ... t-ssl.conf
4) wget http://download.vicidial.com/vicibox/1111-default.conf
5) openssl req -x509 -nodes -days 1095 -newkey rsa:2048 -keyout /etc/apache2/ssl.key/vicibox.key -out /etc/apache2/ssl.crt/vicibox.crt

-------------

ViciBox v.8.0.0 and under does not have the perl module symlinked in the place a decryption module expects it for the lead loader. This just needs to be put into place. Directions are below:

1) mkdir -p /usr/lib/perl5/site_perl/5.18.2/Crypt/
2) ln -s /usr/lib/perl5/vendor_perl/5.18.2/Crypt/RC4.pm /usr/lib/perl5/site_perl/5.18.2/Crypt/RC4.pm

-------------

ViciBox v.8.0.0 and under is missing a perl module. You just need to run this one command to fix it. The missing perl module prevents the lead loader from loading.

1) zypper rm xls2csv
2) zypper in perl-Spreadsheet-Read

-------------

ViciBox v.8.0.1 and under has a postfix directive uncommented by default which does not use the proper hostname. This is only an issue when trying to send email with a server.

1) sed -i 's/myhostname = localhost/#myhostname = localhost/' /etc/postfix/main.cf
2) service postfix restart

-------------

ViciBox v.8.0 uses OpenSSH v.7.0 which disables weaker SSH encryption and cipher options. This results in some old linux SSH installs from being unable to connect to ViciBox v.8.0. Due to the security reasons surrounding why these options were disabled, they will not be enabled by default in ViciBox v.8.0. For my information on why these options will not be enabled by default I would recommend reading the information at https://weakdh.org/.

If you need to enable these legacy features, you can do so with the following commands:

1) echo 'KexAlgorithms diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1' >> /etc/ssh/sshd_config
2) echo 'Ciphers 3des-cbc,blowfish-cbc,aes128-cbc,aes128-ctr,aes256-ctr' >> /etc/ssh/sshd_config
3) service sshd restart

[thirdhatch]

Kumba, I can't use my SSL certificates. Apache gives this error:
AH00016: Configuration Failed
[Tue Sep 26 21:50:49.582047 2017] [ssl:emerg] [pid 10203] AH02572: Failed to configure at least one certificate and key for xxx.xxx.com:443
[Tue Sep 26 21:50:49.582163 2017] [ssl:emerg] [pid 10203] SSL Library Error: error:140A80B1:SSL routines:SSL_CTX_check_private_key:no certificate assigned
[Tue Sep 26 21:50:49.582173 2017] [ssl:emerg] [pid 10203] AH02312: Fatal error initialising mod_ssl, exiting.
AH00016: Configuration Failed

These are the same valid certs with the same configuration as version 7.0.4 but apache won't recognize them no matter what I try.

UPDATE - I was able to get apache to start again with SSL by specifying the certificate paths in the virtualhost configuration, but now it only gives errors when trying to load pages. I don't know what I could be doing wrong.

UPDATE - I had to add configuration to listen on the static ip in listen.conf. Apache thought that it was a dummy connection otherwise. This is a lot more post configuration than previously. It this a result of some differences in the software?

UPDATE - Now the apache configuration (top line on reports page) doesn't even have time defined. I have DB time and PHP time, but not apache time. Just blank. All agent logins get the time sync error.

[Kumba]

And that's why it's called the dot Ooops release. I knew I forgot something. I'll update the post in a bit with instructions.



AND updated.

[Kumba]

BTW I'll probably roll all updates/bug-fixes into ViciBox v.8.0.1 on Monday. I don't want to release a bunch of versions until everyone's had a chance to put it through some paces.

[thirdhatch]

Thanks, Kumba! I'll be looking for the new image on Monday and test it.

[Arffeh]

It appears a perl module is also not present:

Code: Select all

/var/log/apache2/error_log

[Fri Sep 29 16:04:49.347069 2017] [core:error] [pid 14596] (13)Permission denied: [client <SNIP>] AH00132: file permissions deny server access: /srv/www/htdocs/favicon.ico
Can't locate Spreadsheet/Read.pm in @INC (you may need to install the Spreadsheet::Read module) (@INC contains: /usr/lib/perl5/site_perl/5.18.2/x86_64-linux-thread-multi /usr/lib/perl5/site_perl/5.18.2 /usr/lib/perl5/vendor_perl/5.18.2/x86_64-linux-thread-multi /usr/lib/perl5/vendor_perl/5.18.2 /usr/lib/perl5/5.18.2/x86_64-linux-thread-multi /usr/lib/perl5/5.18.2 /usr/lib/perl5/site_perl .) at /srv/www/htdocs/vicidial/sheet2tab.pl line 44.
BEGIN failed--compilation aborted at /srv/www/htdocs/vicidial/sheet2tab.pl line 44.

Code: Select all

db1:~ # locate Spreadsheet
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/ParseExcel
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/ParseExcel.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/ReadSXC.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/XLSX
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/XLSX.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/ParseExcel/Cell.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/ParseExcel/Dump.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/ParseExcel/FmtDefault.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/ParseExcel/FmtJapan.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/ParseExcel/FmtJapan2.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/ParseExcel/FmtUnicode.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/ParseExcel/Font.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/ParseExcel/Format.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/ParseExcel/SaveParser
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/ParseExcel/SaveParser.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/ParseExcel/Utility.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/ParseExcel/Workbook.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/ParseExcel/Worksheet.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/ParseExcel/SaveParser/Workbook.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/ParseExcel/SaveParser/Worksheet.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel/BIFFwriter.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel/Big.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel/Chart
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel/Chart.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel/Examples.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel/Format.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel/Formula.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel/OLEwriter.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel/Properties.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel/Utility.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel/Workbook.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel/Worksheet.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel/Chart/Area.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel/Chart/Bar.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel/Chart/Column.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel/Chart/External.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel/Chart/Line.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel/Chart/Pie.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel/Chart/Scatter.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/WriteExcel/Chart/Stock.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/XLSX/Fmt2007.pm
/usr/lib/perl5/vendor_perl/5.18.2/Spreadsheet/XLSX/Utility2007.pm
/usr/lib/perl5/vendor_perl/5.18.2/x86_64-linux-thread-multi/auto/Spreadsheet
/usr/lib/perl5/vendor_perl/5.18.2/x86_64-linux-thread-multi/auto/Spreadsheet/WriteExcel

db1:~ # locate Read.pm
/usr/lib/perl5/vendor_perl/5.18.2/Archive/Zip/MemberRead.pm
/usr/lib/perl5/vendor_perl/5.18.2/Mail/Message/Construct/Read.pm


[Kumba]

run 'zypper in perl-Spreadsheet-Read'

[tgalan]

@Kumba

I got this error on the 8.0.0

ln -s /usr/lib/perl5/vendor_perl/5.18.2/Crypt/RC4.pm /usr/lib/perl5/site_perl/5.18.2/Crypt/RC4.pm
ln: failed to create symbolic link '/usr/lib/perl5/site_perl/5.18.2/Crypt/RC4.pm': No such file or directory

[Arffeh]

tgalan,

do:
mkdir /usr/lib/perl5/site_perl/5.18.2/Crypt/

then do:
ln -s /usr/lib/perl5/vendor_perl/5.18.2/Crypt/RC4.pm /usr/lib/perl5/site_perl/5.18.2/Crypt/RC4.pm

[Kumba]

Bugfix instructions updated

[bmorrison]

Looks like postfix's main.cf is leaving myhostname=localhost no matter what yast lan is set to, which is creating some drama with delivering stuff via email as you might imagine.

Manually editing localhost to whatever your hostname is set to fixes the problem after restarting postfix.

[Kumba]

Looks like if you comment it out it will use gethostbyname() which should return the system HOSTNAME value. Try commenting it out and seeing if postfix picks up the right name by default. If so then I'll add that to future builds and the bugfix.

Looks like postfix's main.cf is leaving myhostname=localhost no matter what yast lan is set to, which is creating some drama with delivering stuff via email as you might imagine.

Manually editing localhost to whatever your hostname is set to fixes the problem after restarting postfix.

[bmorrison]

Yup, commenting out line 698 and restarting postfix did the trick, emails began to flow like wine.

[AlSam]

Has the version available today been updated to contain all these bug fixes?

[Kumba]

Version 8.0.2 will. I'll likely be releasing it before the end of the year.

[rrb555]

Any update on Vicibox 8.0.2?