DirectAdmin 1.714

fln

fln

Administrator
Staff member
Joined
Aug 30, 2021
Messages
1,508
We are happy to announce the release of DirectAdmin 1.714.

A full release change log is here:

DirectAdmin 1.714​


The update should be automatically available for all installations subscribed to the current release channel.

We appreciate all the feedback on forums and issues reported in the ticketing system.

Thanks!
 

Version 1.714 | DirectAdmin Docs

DirectAdmin Knowledge Base
docs.directadmin.com
what's this meaning ?

Is it separate unix-socket handle from normal user application ? And normal user can't using PHP to connect to these socket-handle on root account, right ?
 
It is the same UNIX socket that normal applications use. If MySQL/MariaDB server detects that the other end of UNIX socket (client side) is running as root process (UID 0) then it allows the connection without password.

It works by using the unix_socket authentication plugin for MariaDB or auth_socket authentication plugin for MySQL. For MariaDB the authentication plugin is built-in, for MySQL servers it is loaded by adjusting the MySQL server startup parameters in the systemd service file.

Note: This does not affect existing installations. The code to set-up password-less logins for root is executed only when CustomBuild performs the initial MySQL/MariaDB install (when it initializes the mysql data directory). Old behaviour was to set root account password to be the same as da_user account password. After initial install CB does not touch the root account credentials.

Ohm J said:
And normal user can't using PHP to connect to these socket-handle on root account, right ?
Click to expand...

If PHP process is running as root it can connect without password. If it runs under different UNIX user it will not be able to connect as root. The authentication plugin checks for the client process UID (asks the kernel to check to be more precise, so it is reliable and does not require any userspace process checking).


The implementation is trivial, on fresh installs CB executes:
Code: 
ALTER USER root@localhost IDENTIFIED WITH unix_socket;
or:
ALTER USER root@localhost IDENTIFIED WITH auth_socket;

This single query is enough to replace root account password with password-less mode. It can be used on existing servers. But CB will not do this automatically. For the time being... :).
 
Last edited:
I already used SFTP (port 23) on a Debian 13 server. For this to work I had to disable FTPS in /etc/proftpd.conf (TLSEngine off).
For the Server SSL Certificate I used the ECDSA-256 (the default of ACME?)

After updating to the latest versions I ran into 2 problems, both causing ProFTPd not to be able to start.
○ proftpd.service - ProFTPD FTP Server
Loaded: loaded (/etc/systemd/system/proftpd.service; enabled; preset: enabled)
Active: inactive (dead) since Wed 2026-11-11 16:50:00 CET; 32s ago
Duration: 73ms
Invocation: 60ea87c2b4ec4d478c47b77bbc99a731
Process: 198634 ExecStartPre=/usr/sbin/proftpd --configtest (code=exited, status=0/SUCCESS)
Process: 198636 ExecStart=/usr/sbin/proftpd --nodaemon $PROFTPD_OPTIONS (code=exited, status=0/SUCCESS)
Main PID: 198636 (code=exited, status=0/SUCCESS)
Mem peak: 2.6M
CPU: 82ms

Nov 11 16:50:00 daintern systemd[1]: Starting proftpd.service - ProFTPD FTP Server...
Nov 11 16:50:00 daintern proftpd[198634]: Checking syntax of configuration file
Nov 11 16:50:00 daintern proftpd[198634]: 2026-11-11 16:50:00,074 daintern proftpd[198634]: mod_tls/2.9.2: certificate '/etc/exim.cert': expected RSA certificate, found EC
Nov 11 16:50:00 daintern proftpd[198634]: 2026-11-11 16:50:00,079 daintern proftpd[198634]: mod_tls/2.9.2: certificate '/etc/exim.cert': expected RSA certificate, found EC
Nov 11 16:50:00 daintern proftpd[198634]: 2026-11-11 16:50:00,094 daintern proftpd[198634] 188.200.21.232: mod_sftp/1.2.0: Server 'ProFTPd': cannot support both FTPS (TLSEngine on) and SFTP (SFTPEngine on) for the same host
Nov 11 16:50:00 daintern systemd[1]: Started proftpd.service - ProFTPD FTP Server.
Nov 11 16:50:00 daintern proftpd[198636]: 2026-11-11 16:50:00,148 daintern proftpd[198636]: mod_tls/2.9.2: certificate '/etc/exim.cert': expected RSA certificate, found EC
Nov 11 16:50:00 daintern proftpd[198636]: 2026-11-11 16:50:00,152 daintern proftpd[198636]: mod_tls/2.9.2: certificate '/etc/exim.cert': expected RSA certificate, found EC
Nov 11 16:50:00 daintern proftpd[198636]: 2026-11-11 16:50:00,168 daintern proftpd[198636] 188.200.21.232: mod_sftp/1.2.0: Server 'ProFTPd': cannot support both FTPS (TLSEngine on) and SFTP (SFTPEngine on) for the same host
Nov 11 16:50:00 daintern systemd[1]: proftpd.service: Deactivated successfully.

After generating a RSA 4096 Server Certificate, this problem was solved. Now I ran into the old problem, I had to disable FTPS again, because FTPS and SFTP can't run on the same installation.

○ proftpd.service - ProFTPD FTP Server
Loaded: loaded (/etc/systemd/system/proftpd.service; enabled; preset: enabled)
Active: inactive (dead) since Wed 2026-11-11 16:53:29 CET; 4s ago
Duration: 88ms
Invocation: 169df26187954caead6ac57355bd602f
Process: 200739 ExecStartPre=/usr/sbin/proftpd --configtest (code=exited, status=0/SUCCESS)
Process: 200741 ExecStart=/usr/sbin/proftpd --nodaemon $PROFTPD_OPTIONS (code=exited, status=0/SUCCESS)
Main PID: 200741 (code=exited, status=0/SUCCESS)
Mem peak: 2.3M
CPU: 84ms

Nov 11 16:53:28 daintern systemd[1]: Starting proftpd.service - ProFTPD FTP Server...
Nov 11 16:53:28 daintern proftpd[200739]: Checking syntax of configuration file
Nov 11 16:53:29 daintern proftpd[200739]: 2026-11-11 16:53:29,029 daintern proftpd[200739] 188.200.21.232: mod_sftp/1.2.0: Server 'ProFTPd': cannot support both FTPS (TLSEngine on) and SFTP (SFTPEngine on) for the same host
Nov 11 16:53:29 daintern systemd[1]: Started proftpd.service - ProFTPD FTP Server.
Nov 11 16:53:29 daintern proftpd[200741]: 2026-11-11 16:53:29,119 daintern proftpd[200741] 188.200.21.232: mod_sftp/1.2.0: Server 'ProFTPd': cannot support both FTPS (TLSEngine on) and SFTP (SFTPEngine on) for the same host
Nov 11 16:53:29 daintern systemd[1]: proftpd.service: Deactivated successfully.

Do I have to manually reconfigure proftpd on all my servers, because the update breaks the old one? Can this be solved in a different way?

Enrico
 
@enricovangoor, just disable the SFTP support in proftpd with:

Code: 
da build set proftpd_sftp_port 0
da build proftpd

It should be disabled by default, unless CB found some config files hinting that it might have been used. Probably because it was disabled not by excluding the proftpd module for SFTP but by using custom configuration.
 
enricovangoor said:
I already used SFTP (port 23) on a Debian 13 server. For this to work I had to disable FTPS in /etc/proftpd.conf (TLSEngine off).
For the Server SSL Certificate I used the ECDSA-256 (the default of ACME?)

After updating to the latest versions I ran into 2 problems, both causing ProFTPd not to be able to start.
○ proftpd.service - ProFTPD FTP Server
Loaded: loaded (/etc/systemd/system/proftpd.service; enabled; preset: enabled)
Active: inactive (dead) since Wed 2026-11-11 16:50:00 CET; 32s ago
Duration: 73ms
Invocation: 60ea87c2b4ec4d478c47b77bbc99a731
Process: 198634 ExecStartPre=/usr/sbin/proftpd --configtest (code=exited, status=0/SUCCESS)
Process: 198636 ExecStart=/usr/sbin/proftpd --nodaemon $PROFTPD_OPTIONS (code=exited, status=0/SUCCESS)
Main PID: 198636 (code=exited, status=0/SUCCESS)
Mem peak: 2.6M
CPU: 82ms

Nov 11 16:50:00 daintern systemd[1]: Starting proftpd.service - ProFTPD FTP Server...
Nov 11 16:50:00 daintern proftpd[198634]: Checking syntax of configuration file
Nov 11 16:50:00 daintern proftpd[198634]: 2026-11-11 16:50:00,074 daintern proftpd[198634]: mod_tls/2.9.2: certificate '/etc/exim.cert': expected RSA certificate, found EC
Nov 11 16:50:00 daintern proftpd[198634]: 2026-11-11 16:50:00,079 daintern proftpd[198634]: mod_tls/2.9.2: certificate '/etc/exim.cert': expected RSA certificate, found EC
Nov 11 16:50:00 daintern proftpd[198634]: 2026-11-11 16:50:00,094 daintern proftpd[198634] 188.200.21.232: mod_sftp/1.2.0: Server 'ProFTPd': cannot support both FTPS (TLSEngine on) and SFTP (SFTPEngine on) for the same host
Nov 11 16:50:00 daintern systemd[1]: Started proftpd.service - ProFTPD FTP Server.
Nov 11 16:50:00 daintern proftpd[198636]: 2026-11-11 16:50:00,148 daintern proftpd[198636]: mod_tls/2.9.2: certificate '/etc/exim.cert': expected RSA certificate, found EC
Nov 11 16:50:00 daintern proftpd[198636]: 2026-11-11 16:50:00,152 daintern proftpd[198636]: mod_tls/2.9.2: certificate '/etc/exim.cert': expected RSA certificate, found EC
Nov 11 16:50:00 daintern proftpd[198636]: 2026-11-11 16:50:00,168 daintern proftpd[198636] 188.200.21.232: mod_sftp/1.2.0: Server 'ProFTPd': cannot support both FTPS (TLSEngine on) and SFTP (SFTPEngine on) for the same host
Nov 11 16:50:00 daintern systemd[1]: proftpd.service: Deactivated successfully.

After generating a RSA 4096 Server Certificate, this problem was solved. Now I ran into the old problem, I had to disable FTPS again, because FTPS and SFTP can't run on the same installation.

○ proftpd.service - ProFTPD FTP Server
Loaded: loaded (/etc/systemd/system/proftpd.service; enabled; preset: enabled)
Active: inactive (dead) since Wed 2026-11-11 16:53:29 CET; 4s ago
Duration: 88ms
Invocation: 169df26187954caead6ac57355bd602f
Process: 200739 ExecStartPre=/usr/sbin/proftpd --configtest (code=exited, status=0/SUCCESS)
Process: 200741 ExecStart=/usr/sbin/proftpd --nodaemon $PROFTPD_OPTIONS (code=exited, status=0/SUCCESS)
Main PID: 200741 (code=exited, status=0/SUCCESS)
Mem peak: 2.3M
CPU: 84ms

Nov 11 16:53:28 daintern systemd[1]: Starting proftpd.service - ProFTPD FTP Server...
Nov 11 16:53:28 daintern proftpd[200739]: Checking syntax of configuration file
Nov 11 16:53:29 daintern proftpd[200739]: 2026-11-11 16:53:29,029 daintern proftpd[200739] 188.200.21.232: mod_sftp/1.2.0: Server 'ProFTPd': cannot support both FTPS (TLSEngine on) and SFTP (SFTPEngine on) for the same host
Nov 11 16:53:29 daintern systemd[1]: Started proftpd.service - ProFTPD FTP Server.
Nov 11 16:53:29 daintern proftpd[200741]: 2026-11-11 16:53:29,119 daintern proftpd[200741] 188.200.21.232: mod_sftp/1.2.0: Server 'ProFTPd': cannot support both FTPS (TLSEngine on) and SFTP (SFTPEngine on) for the same host
Nov 11 16:53:29 daintern systemd[1]: proftpd.service: Deactivated successfully.

Do I have to manually reconfigure proftpd on all my servers, because the update breaks the old one? Can this be solved in a different way?

Enrico
Click to expand...
Actually, you can have both and many servers do, mine included.

You may notice that DA version mod_tls.c is enabled in the main part of the config, while the mod_sftp part has its own VirtualHost.You should review your customizations that you have and re-evaluate what's actually needed and what's just a historical burden that you keep carrying over.
 
You must log in or register to reply here.
Back
Top