# Fixes you need after upgrading Ubuntu from 14.04 to 16.04

[TOC]

## Apache

Ubuntu 16.04 ships Apache 2.4, there's no mysql auth module for Apache
available, so you must disable all mysql auth related settings in Apache
config files. For example:

* /etc/apache2/apache2.conf
* /etc/apache2/conf-available/awstats.conf
* /etc/apache2/conf-available/cluebringer.conf

## Postfix

```
postconf -e daemon_directory='/usr/lib/postfix/sbin'
postconf -e shlib_directory='/usr/lib/postfix'
```

* Incorrect `daemon_directory` causes Postfix cannot start.
* Incorrect `shlib_directory` causes Postfix cannot find pcre/mysql/pgsql/ldap modules.

## iRedAPD

iRedAPD requires package `python-pymysql`:

```
apt -y install python-pymysql
```

## Roundcube webmail

Make sure you have settings below in Roundcube config file `config/config.inc.php`:

```
// Required if you're running PHP 5.6 or later
$config['imap_conn_options'] = array(
    'ssl' => array(
        'verify_peer'  => false,
        'verify_peer_name' => false,
    ),
);

// Required if you're running PHP 5.6 or later
$config['smtp_conn_options'] = array(
    'ssl' => array(
        'verify_peer'      => false,
        'verify_peer_name' => false,
    ),
);
```

## PHP [OPTIONAL]

> NOTE: This step is toally optional if you're fine with old PHP release.

php was not upgraded to 7.0 automatically, have to install them manually:

```
apt-get install php-json php-gd php-mcrypt php-curl mcrypt php-intl php-xml php-mbstring php-mysql libapache2-mod-php
```

### Nginx and php-fpm

If you're running Nginx, you must install package `php-fpm` too:

```
apt install php-fpm
```

php-fpm daemon socket file is changed:

* old one: `/var/run/php-fpm.socket`
* new one: `/var/run/php/php7.0-fpm.sock`

iRedMail hard-codes php-fpm socket file in `/etc/nginx/nginx.conf` or
`/etc/nginx/conf.d/default.conf`, you must update them to use new socket file.

## Fail2ban

After upgrading Fail2ban, it will fail to start due to duplicate parameter
`port =` in file `/etc/fail2ban/jail.conf` under section `[pam-generic]` like
below:

```
[pam-generic]
...
port = all
...
port = anyport
```

Please comment out either one of them, then Fail2ban should be happy to start.