[horde] Standalone Horde server access disabled overnight (wrong username or password)

[Arjen de Korte]

Citeren Louis-Philippe Allard <lp.allard.1 at gmail.com>:

> Quoting Arjen de Korte <build+horde at de-korte.org>:
>
>> Check the difference between
>>
>>    pear config-show
>>
>> and
>>
>>    pear config-show system
>>
>> shows. The first is what you use when running the pear commands,  
>> the second probably what is configured in the system wide settings.  
>> It could be that the user your webserver is running as, is using  
>> another configuration. If there is a .pearrc in the home directory  
>> of your 'www' or 'wwwrun' (or whatever your user that runs PHP  
>> uses), this is different. You might get an idea of the  
>> configuration used by running this command in a command shell from  
>> within Horde
>>
>> With the above mentioned configuration, if you run pear, the  
>> information about installed Horde packages will end up in the  
>> /var/lib/pear/.registry/.channel.pear.horde.org directory and if  
>> you go to that directory, you'll probably see that most files are  
>> fairly fresh. But I'm pretty sure that this is not what your  
>> webserver is using at the moment. A hackish fix might be to just  
>> symlink the directory Horde uses to the actual directory.
>>
>>> Additionally, I realised that since I ran the updates that were  
>>> suggested, my horde setup is no longer able to deal with emails  
>>> containing PDF files.
>>
>> This is actually good news, since it means that at least the  
>> packages are updated, you're just not seeing the correct version  
>> information in Horde.
>>
>>> When I highlight an email with such attachment, I see a red popup  
>>> in the corner saying "Error when communicating with the server".   
>>> If I try to open the email in a separate window, I get this crash  
>>> trace:
>>>
>>> A FATAL ERROR HAS OCCURRED
>>>
>>> UNDEFINED CLASS CONSTANT 'ALPHACHANNEL_REMOVE'
>>>
>>> 1. Horde_ErrorHandler::catchFatalError()
>>>
>>> DETAILS
>>>
>>> The Full Error Message Is Logged In Horde's Log File, And Is Shown  
>>> Below Only To Administrators. Non-administrative Users Will Not  
>>> See Error Details.
>>
>> This has been discussed before on this mailinglist, search the  
>> archives for 'ALPHACHANNEL_REMOVE'. Bottomline is that your imagick  
>> library is too old (which you should remedy immediately, since this  
>> is a security problem).
>>
>>> ErrorException Object (     [message:protected] => Undefined class  
>>> constant 'ALPHACHANNEL_REMOVE'     [string:Exception:private] =>   
>>>     [code:protected] => 0     [file:protected] =>  
>>> /var/www/html/horde/imp/lib/Mime/Viewer/Pdf.php     
>>>  [line:protected] => 142     [trace:Exception:private] => Array     
>>>      (             [0] => Array                 (                   
>>>    [function] => catchFatalError                     [class] =>  
>>> Horde_ErrorHandler                     [type] => ::                 
>>>      [args] => Array                         (                     
>>>      )                  )          )       
>>> [previous:Exception:private] =>      [severity:protected] => 1     
>>>  [logged] => 1 )   Finally, I noticed (while browsing the OS) that  
>>> /tmp/pear/download is filled with the latest pear packages from  
>>> the Horde pear channel... Not sure why the CLI update fails but  
>>> the webinterface sees thera available updates, and the packages  
>>> are somwhow downloaded locally but not used to upgrade the  
>>> existing ones.   So?  I'm a bit "lost" here...  May have to start  
>>> from a fresh install?
>>> Louis-Philippe Allard
>>> lp.allard.1 at gmail.com
>>> Sent using Horde Groupware on GNU/Linux
>>
>> --
>> Horde mailing list
>> Frequently Asked Questions: http://horde.org/faq/To unsubscribe,  
>> mail: horde-unsubscribe at lists.horde.org
>
> OK I managed to progress.  The good news:  PHP is upgraded from 5.4  
> to 7.2.  Horde feels snappier and much faster.  Also PDF's are OK  
> now in IMP.
>
> Bad news: I am still stuck with the original issue (not able to  
> upgrade Horde).  The command "pear config-show" gives:
>
> PHP extension directory        ext_dir          /usr/lib64/php/modules
> Base Horde directory           horde_dir        /var/www/html/horde
> PEAR directory                 php_dir          /usr/share/php
> Systems manpage files          man_dir          /usr/share/man
>
> While the command "pear config-show system" gives:
>
> PHP extension directory        ext_dir          <not set>
> Base Horde directory           horde_dir        <not set>
> PEAR directory                 php_dir          /usr/share/pear
> Systems manpage files          man_dir          <not set>
> directory
>
> So clearly there are difference between the variables.  If I run  
> "whoami" in Horde's CLI webinterface, it reports "apache", so I  
> believe Horde is running under the user "apache" which would make  
> sense.  Apache's home folder seems to be "/usr/share/httpd"  
> according to the following command"
>
> [root at centos-mail[1] httpd]# getent passwd apache
> apache:x:48:48:Apache:/usr/share/httpd:/sbin/nologin
>
> There are NO .pearrc files in its "home" folder.

This should be easy to fix. Since there is no .pearrc for the Apache  
user, it will default to the system settings. The horde_dir is not  
defined in the system settings, so you'll need to fix that:

     pear config-set horde_dir /var/www/html/horde system

Also make sure the metadata_dir is the same as in the user configuration.

> Do you still recommend symlinking or there's a cleaner way of  
> putting things back in order?

No, this should be fixable.

> Gettin' there!
>
> Links:
> ------
> [1] https://centos-mail/horde/imp/dynamic.php?page=mailbox#
>  Louis-Philippe Allard
> lp.allard.1 at gmail.com
> Sent using Horde Groupware on GNU/Linux