DirectAdmin Docs
Search K

Appearance

Version 1.714 ​

Released: 2026-11-11

SFTP support for ProFTPD new ​

The CustomBuild script now supports configuring the ProFTPD service to run in SFTP (file transfer over SSH protocol) mode.

A new CustomBuild option proftpd_sftp_port is added. The default value proftpd_sftp_port=0 keeps the SFTP support disabled. Values 1-65535 reconfigures ProFTPD to start accepting SFTP connections on the configured port.

Before this release, support for SFTP was possible only by customizing the ProFTPD installation script. The DirectAdmin updater script will try detecting if SFTP support was enabled and what port it used. If auto-detection succeeds, it will set the new proftpd_sftp_port option to the SFTP port that is already in use.

CustomBuild support for MySQL 9.7 new ​

CustomBuild now supports installing MySQL 9.7 release. This version no longer supports the legacy mysql_native authentication plugin. The upgrade path from MySQL 8.4 to MySQL 9.7 is disabled to prevent a potential outage due to existing accounts using the old authentication plugin.

The restriction for upgrades from MySQL 8.4 to MySQL 9.7 will be lifted once we find a good way to migrate old passwords or make sure there are no MySQL accounts still using legacy password hashes.

CustomBuild support for PHP Excimer extension new ​

CustomBuild now supports installing Excimer PHP extension.

To enable it set php_excimer option to yes.

sh
da build set php_excimer yes
da build php_excimer

Pending certificate provisioning jobs shown in provisioning history evolution update ​

The "Provisioning history" page (Account Manager -> SSL/TLS Certificates) is updated to better reflect the state of queued certificate issue attempts:

  • A new Pending status is shown for attempts that are queued but have not started yet. Their start time and duration are shown as - until the attempt starts.
  • The duration of a running attempt is now updated live every second.

File Manager file upload progress evolution update ​

The file upload dialog in the File Manager has an updated style. The progress bar background shown while a file is being uploaded is now slightly darker, making the upload progress easier to see.

Prefer same domain TLS certificates update ​

If a domain is covered by multiple certificates from multiple user-owned domains, the certificate from the same domain will be preferred in the web server configuration.

Prior to this release, any user-owned certificate could be used. It was hard to understand why a particular certificate is preferred over the other.

New MySQL/MariaDB installations will use UNIX socket auth for root account update ​

The MySQL/MariaDB installation script is updated to set up the root database account to use UNIX socket authentication. This means the root user will be able to connect to the local database without a password.

Web interface for OpenLiteSpeed is disabled by default update ​

The OpenLiteSpeed installation script is updated to keep the OpenLiteSpeed WebAdmin Console disabled by default. A new CustomBuild option ols_webadmin is added. The default value is no, changing it to yes would enable the web interface.

The reason for keeping it disabled by default is to increase the server security for standard installations. OpenLiteSpeed usesi an internal PHP version (not managed by DirectAdmin) for the WebAdmin console. The internal PHP bundled with OLS can be a potential attack vector even when all standard PHP installations are patched. The WebAdmin Console adds little value for DirectAdmin servers because it stays in read-only mode, it cannot be used to change OLS configuration.

Update Exim configuration to use SNI for outbound SMTP connections update ​

Exim mail server configuration is updated to start using SNI for outgoing SMTP connections. This means Exim will include the host name of the remote mail server when a TLS connection is being established. This allows the remote mail server to respond with a correct certificate. Prior to this change, remote mail servers had to always use the default server certificate because there was no SNI hint in the request.

Since certificate host name matching is not enforced for SMTP, this change does affect the ability to deliver emails. However, Exim will more often get a correct remote server certificate.

Software version changes custombuildupdate ​

  • MySQL 9.7 added with 9.7.4 version
  • excimer (PHP extension) added with 1.2.7 version
  • Apache web server updated from 2.4.69 to 2.4.70
  • LiteSpeed web server updated from 6.3.7-8 to 6.3.7-9
  • apr-util updated from 1.6.5 to 1.6.6
  • composer updated from 2.10.3 to 2.11.2
  • lego updated from 5.5.2 to 5.6.0
  • proftpd updated from 1.3.9d to 1.3.9e
  • redis updated from 8.10.2 to 8.10.3
  • roundcubemail updated from 1.7.5 to 1.7.6

Simplified suspension reasons evolution update ​

Suspension reasons are now optional and easier to understand.

File Manager quick action button permissions evolution fix ​

The File Manager quick action button, shown in the sidebar and in the profile dropdown menu, did not check user permissions. Users could click the button even if they did not have permission to use the File Manager. The button is now shown only to users who have the required permission.

Bulk actions removed from "Manage User Packages" page evolution removal ​

The table on the "Manage User Packages" page (Reseller Level) no longer has row selection checkboxes and bulk actions. This makes the page simpler and helps prevent accidentally changing or deleting several packages at once.

User packages can still be managed one at a time from the table.

Removed "none" and custom suspension reasons removal ​

Custom suspension reasons and "none" are no longer accepted.

If user was suspended for an unknown reason (appended via custom/suspension_reason.txt), it will appear along existing suspension details in the following format:

[Your custom reason]

Existing details for suspension.

Removed domain suspension reason removal ​

It is no longer possible to set a reason when suspending a domain. The following lists what was removed.

Enhanced skin:

  • Domain suspension reason is no longer shown anywhere in the skin

API:

  • /CMD_DOMAIN reason parameter

CLI:

  • da suspend-domain --reason option

Templates:

  • SUSPENDED_REASON httpd.conf template token