Changelog
Changes in version 2.18.10 (11/27/2025):
- fixed configuration issue with Postfix when SRS is enabled and an outbound IPv6 address selected (GH-110)
- adjusted Postfix service name in
lclogparse.confon Debian 13 (GH-107) - fix base directory part in
/etc/dovecot/passwd(mailboxes created before 06/2021 might have/var/mailinstead of/var/mail/<account>/<id>, this leads to problems with Dovecot 2.4 (Debian 13))
Changes in version 2.18.9 (11/11/2025):
- improved Postfix configuration on RPM systems (CentOS/Rocky/Alma) to support chroot configuration for sendmail by managing files in
/var/spool/postfix/etc - updated cURL (8.17.0) and libunbound (1.24.1)
Changes in version 2.18.8 (11/03/2025):
- changed order of Postfix milters to run OpenDKIM milter before SpamAssassin (lcsam), which might rewrite mail subject
- prepared for upcoming license key certificate rollover
- fixed issues with managed DNSSEC keys and orphaned
.jbk/.signed/.signed.jnlfiles when deleting zones on Debian 13 - fixed mailbox quota configuration with Dovecot 2.4+
- adjust file owner of BIND zone files (
bindinstead ofroot) - fixed Sieve configuration for Dovecot 2.4 on Debian 13
Changes in version 2.18.7 (09/12/2025):
- fixed bug when creating new sites with website builder
- fixed configuration error with NGINX on Debian 13 (duplicate
http2 on;)
Changes in version 2.18.6 (09/02/2025):
- fixed regression bug in NGINX config >=1.25 (both
listen ssl http2;andhttp2 on;was written) - fixed setting
mail_path = ~for Dovecot 2.4 - allow underscore within CNAME target names
Changes in version 2.18.4 (08/25/2025):
- removing orphaned records from
TSIGKEYSandNAMESERVERS(when server has been deleted manually) - fixed configuration of HTTP/2 on NGINX >=1.25.1
- removed deprecated setting
smtpd_tls_dh1024_param_fileon Postfix 3.9+ - moving contents of
/var/mail/<account>/<id>/Maildir/one level up (affecting only Debian 13 / Dovecot 2.4)
Changes in version 2.18.3 (08/15/2025):
- added support for Debian 13 (“Trixie”)
- added support for Dovecot 2.4
Changes in version 2.18.2 (08/05/2025):
- added tool
lcdnsto remove orphaned DNSKEY records from zones - Debian/Ubuntu: when upgrading to LiveConfig v3, some services got masked and disabled (lclogparse/lcpolicyd/lcsam/etc.)
Changes in version 2.18.1 (08/04/2025):
- fixed bug during DNSSEC migration: some zones with 4096 bit RSA keys might have been configured with 2048 bit policy and thus lost their ZSK keys; all affected domains are fixed with this update.
Changes in version 2.18.0 (08/01/2025):
- updating DNSSEC configuration (adjusting for dnssec-policy)
more information: see Knowledge Base: DNSSEC Migration - no more support for i386 platform
- supporting
caching_sha2_passwordauthentication with MySQL >= 8.0 (thus supporting MySQL 8.4+ withoutmysql_native_passwordplugin) - increased RSA key size for self-signed (temporary) TLS certificates from 1024 to 2048 bit
- refactored Debian/Ubuntu package scripts to allow seamless upgrade to LiveConfig 3.x
- fixed bug leading to duplicate lines in some Postfix map files
- prevent deadlock when running programs via
LC.exec() - added workaround against segmentation fault when detecting
php.inilocation with PHP-CGI+Ioncube+OpCache (php-src#14470)
Changes in version 2.17.0 (03/11/2025):
- support for SRS (Sender Rewriting Scheme) with PostSRSd 2.x
- supporting pre-hashed Dovecot passwords
- php function
opcache_get_statuscan optionally be allowed in FPM mode (LC.web.FPM_ALLOW_OPCACHE_STATUS) - updated database schema to be 1:1 compatible with LiveConfig 3.0.0~beta8
- support placeholders
###CUSTOMERID###and###NAME###in mass mail - increased maximum length of e-mail addresses for forwards from 128 to 255 byte
- e-mail submission using TLS with 1024 bit DH parameters isn’t possible any more (such old e-mail clients shouldn’t be in use any more)
- fixed issue when creating manual backup [beta!]
- fixed problem when upgrading database schema from LiveConfig 2.4.x to latest version
- improved Postfix configuration when using address extensions with mail forwarding (setting
propagate_unmatched_extensions=canonical) - fixed bug when renaming wildcard e-mail addresses
- fixed possible problem when using e-mail address extensions (
+) with mail forwarding - fixed bug with php.ini values longer than 512 bytes
Changes in version 2.16.6 (06/28/2024):
- fixed issue during database schema upgrade with MySQL in some cases
Changes in version 2.16.5 (06/28/2024):
- fixed issue in NGINX configuration (Apache Reverse Proxy) when accessing certain files in
/.well-known/ - fixed bug when adding customers with customer IDs consisting of >10 digits when using MySQL as backend database
- fixed problem when importing 2024 timezone data into MySQL database (might have caused “Incorrect datetime value” error)
- fixed issue when logging in with “Google Titan” WebAuthn token
- fixed bug in SOAP method
CustomerGetwhen searching for customer id0 - fixed bug when adding customers via SOAP method
CustomerAddwith customer id >32bit - NS records where not updated when secondary DNS servers have been changed in DNS template
Changes in version 2.16.4 (05/15/2024):
- fixed problem during database schema upgrade if users have been deleted manually from database
Changes in version 2.16.3 (05/13/2024):
- DKIM is now automatically enabled for new domains (if DKIM service is installed & configured) - can be controlled via LCDefaults setting
mail.dkim.default - option to copy DKIM keys to clipboard when displaying details of customers’ domains
- added Dovecot option to automatically create some default IMAP mail folders (Drafts, Sent, Trash), i.e. for Outlook
- improved
mailquota.shscript - updated jQuery
- added “copy to clipboard” button for raw DKIM key
- detection of MariaDB server package from vendor repository
- for Postfix >= 3.0, the option
smtputf8_enable=nois set, to mitigate problems with IDN domains when talking to other IDN-capable mail servers - prepared separate permission for viewing log files
- updated timezone data (2024a)
- allow editing e-mail blacklist/whitelist as mailbox user
- allow subnet ranges for DNS blacklists, e.g.
dnsbl.example.org=127.0.0.[2..11] - fixed bug when enabling external database access with MySQL >= 8.0 and MariaDB >= 10.3
- fixed issue in database schema which required temporarily disabling foreign keys for (re-)import
- traffic wasn’t counted correctly for NGINX-only websites
Changes in version 2.16.2 (12/22/2023):
- implemented workaround against “SMTP Smuggling” with Postfix (see https://www.postfix.org/smtp-smuggling.html)
Postfix configuration will be adjusted automatically during upgrade.
Changes in version 2.16.1 (12/01/2023):
- updated OpenSSL to 1.1.1w
- improved detection of MariaDB 10.8-11.1
- support package “postfix3” on CentOS
- more database schema changes in preparation of LiveConfig 3.x
- supporting systemd-journald for parsing e-mail logs (i.e. for counting inbound and outbound e-mails)
- fixed issue when upgrading to LiveConfig 2.16.x with migrated “old” MySQL backend database (table row format is now automatically being converted to
DYNAMIC) - fixed creation of PHP opcache directory if subscription name contains a dash (
-) - fixed issue with “too many open files” when
/etc/mtabcontained some specially broken records - website builder selection wasn’t possible in “expert view” of a subdomain
- subdomains where not reconfigured when website builder was deleted
- fixed display bug when multiple website builders where used within one account
- fixed error when deleting customers with additional users having contact data managed by that customer
- deleted domains sometimes where not removed from
sender_localfile - fixed issue with table
BACKUPJOBSduring database schema upgrade
Changes in version 2.16.0 (05/23/2023):
- support Debian 12 (Bookworm)
- for more privacy, the IP address of authenticated mail senders can be removed from
Received:header - improved detection of PHP8 packages (e.g. on Ubuntu 22)
- increased size limits for E-Mail accept/reject lists from 16kB to 64kB
- fixed bug in (empty) MySQL database schema (
db-mysql.sql.gz) (affecting tablesRRA_MAILandRRD_MAIL) - fixed detection of MariaDB Server 10.6 (Ubuntu 22)
Changes in version 3.1.2 (27.11.2025):
- Frontend: fixed various issues with backup plans (GH-75, GH-91)
- Frontend: fixed rounding issue in spam filter thresholds
- Frontend: show name of underlying reseller account when editing an account
- Frontend: optionally accept overprovisioning of existing accounts when reducing resources of a reseller account
- Backend: added
--db-repaircommand to CLI - Backend: improved detection of AlmaLinux
- Backend: fixed “unresolvable permission problem” in some special cases (nested reseller structure with cross-assigned templates)
- Backend: fixed bug when creating additional user (typo in SQL)
- Backend: fixed configuration issue with Postfix when SRS is enabled and an outbound IPv6 address selected (GH-110)
- Backend: adjusted Postfix service name in
lclogparse.confon Debian 13 (GH-107) - Backend: fix base directory part in
/etc/dovecot/passwd(mailboxes created before 06/2021 might have/var/mailinstead of/var/mail/<account>/<id>, this leads to problems with Dovecot 2.4 (Debian 13)) - Backend: when saving ProFTPD configuration, missing DSO modules are added to
modules.conf(i.e. after upgrading from Debian 12 to 13) - changed systemd dependency from
network.targettonetwork-online.target - LAC: PHP extensions from Remi repository were not loaded due to filtered
/etc/opt/remidirectory - LAC: fixed removal of user slice drop-in when disabling container
- LAC: terminate running processes when stopping a container
Changes in version 3.1.1 (11.11.2025):
- Frontend: added “early” input validation to DNS editor, improved input of TLSA RRs
- Backend: improved Postfix configuration on RPM systems (CentOS/Rocky/Alma) to support chroot configuration for sendmail by managing files in
/var/spool/postfix/etc - Backend: improved logging when
NotFoundException(“Object not found or not permitted”) occurs, contains object name and identifier now - Backend: updated cURL (8.17.0), PCRE2 (10.47), SQLite (3.51.0) and libunbound (1.24.1)
- Backend: in some cases, DNS A/AAAA/MX records were not created immediately when a new subdomain has been added (on own nameservers)
- Backend: when re-enabling e-mail for a domain/subdomain, the SPF record was not set in DNS
- Backend: fixed Sieve configuration for Dovecot 2.4 on Debian 13
Changes in version 3.1.0 (03.11.2025):
- Frontend: if e-mail autoresponder is disabled via LCDefaults, don’t show autoresponder options when logging in with e-mail account
- Frontend: fixed issue in quick search when search result belongs to a reseller customer
- Frontend: fixed bug when customer changes SPF record of managed domain (new setting wasn’t saved)
- Frontend: automatically calculate/increase account name (number) according to configured account name prefix
- Frontend: show webmail URL in mailbox info (if configured at Servers -> Mailserver -> Dovecot)
- Frontend: it’s now possible to switch into a customer account directly from quick search
- Backend: fixed bug when bulk-adding domains without ‘www’ subdomain and without e-mail
- Backend: fixed issues with managed DNSSEC keys and orphaned
.jbk/.signed/.signed.jnlfiles when deleting zones on Debian 13 - Backend: optimized DNS RR updates (prevent multiple identical updates, avoid removing & adding RR when updating data)
- Backend: removing references to deleted TLS certificates from subdomains
- Backend: fixed mailbox quota configuration with Dovecot 2.4+
- Backend: public keys for DKIM records created with v3.0.x were published in wrong format (PKCS#1 instead of SubjectPublicKeyInfo) - corresponding DNS records are automatically updated
- Backend: trigger pending DNS update jobs when LiveConfig is restarted
- Backend: adjust file owner of BIND zone files (
bindinstead ofroot) - Backend: fixed bug when editing CAA record of a domain (not updated dynamically into zone)
- Backend: limited maximum TTL for DNS records to 86400 seconds (to mitigate problems with DNSSEC)
- Backend: prepared for upcoming license key certificate rollover
Changes in version 3.0.8 (20.10.2025):
- Frontend: allowing only one KSK for DNSSEC (until KSK rollover available with
dnssec-policy) - Frontend: automatic end date of e-mail autoresponder could not be disabled
- Frontend: hide e-mail autoresponder if disabled via LCDefaults setting
mail.autoresponder.enabled - Frontend: fixed bug with “incompatible” IPv6 log filter settings from LiveConfig 2.x (GH-22)
- Frontend: fixed problem when running
zshas login shell via web terminal - Frontend: don’t show e-mail MobileConfig link when AutoConfig is not enabled on mail server
- Frontend: fixed various issues when editing php.ini settings for own accounts (GH-73) and customer accounts
- Backend: fixed bug when updating DNSSEC settings of existing domains
- Backend: changed order of Postfix milters to run OpenDKIM milter before SpamAssassin (lcsam), which might rewrite mail subject
- Backend: fixed bug when deleting pure mail forwarding addresses (sometimes blocked deletion of domains/accounts)
- API: relaxed constraints for Dynamic DNS user name (1-40 ASCII characters)
- improved backward compatibility between LiveConfig 3.x server and LiveConfig 2.x clients in multi-server environments
Changes in version 3.0.7 (10.10.2025):
- Frontend: added input field for DNS serial number when adding a domain on managed nameservers
- Frontend: show errors from DNS RRs when submitting invalid data in DNS editor (GH-97)
- Frontend: improved error messages when limits are exceeded while editing an account or a template
- Frontend: allow empty TTL field for custom DNS RRs to use default value from zone (GH-97)
- Backend: updated OpenSSL (3.3.5), Expat (2.7.3) and libunbound (1.24.0)
- Backend: fixed bug when sorting mailbox list by I/O
- Backend: fixed bug when updating RRD data has failed
- Backend: fixed bug when permitting external access from a /24 subnet to MySQL/MariaDB databases
- Backend: fixed bug when adding new domain via API and using
wwwSyncoption - Backend: fixed bug when revoking SSH/SCP permission (GH-93)
- Backend: fixed broken database record when domain name of a mailbox has been changed
- Backend: added more sanity checks for custom DNS records (i.e. no CNAME with other data, no NS for empty host name)
- Backend: when disabling webspace (HTTP) for a subdomain and the DNS of that domain is managed by LiveConfig, only the A record was removed from DNS, not the AAAA record.
- Backend: check for conflicting A/AAAA/MX record when trying to create a CNAME record
- Backend: check for conflicting CNAME record when enabling webspace or e-mail for a subdomain
- Backend: update all MX records when hostname or MX setting for SMTP server is changed
- LAC: fixed problem with accounts using suexec wrapper when LAC was not enabled
Changes in version 3.0.6 (01.10.2025):
- Frontend: fixed bug when editing any
wwwsubdomain (preferred subdomain dropdown containedwww.www...) - Frontend: new Cron jobs are now “active” by default (GH-77)
- Frontend: creating new directories via web file manager with permissions
0755instead of0700 - Backend: fixed missing slash in password reset mail (triggered by administrator/reseller)
- Backend: fixed bug when deploying automated TLS certificates (when “sync with www subdomain” was enabled, this could have resulted in broken configurations since 3.0.5)
- Backend: fixed another bug with “sync with www subdomain” when using existing TLS certificates
- Backend: fixed several bugs which prevented account deletion being completed
- Backend: fixed bug which did not retrigger account deletion on restart
Changes in version 3.0.5 (26.09.2025):
- Frontend: sort list of IP addresses in web server page
- Frontend: require password when changing e-mail type from forwarding to mailbox
- Frontend: fixed bug when disabling custom logo which has also been used on login page
- Frontend: fixed display bug with custom logo (GH-85)
- Backend: fixed bug when trying to add new e-mail address while hosting accounts with invalid/orphaned mail servers exist
- Backend: LiveConfig log files were not rotated
- Backend: update SMTP statistics on sent/received mails per mailbox every 15 minutes
- Backend: update disk usage data every 15 minutes
- Backend: added man pages for lclogparse(1) and lclogsplit(1)
- Backend: don’t abort upgrade if
/etc/liveconfig/tls-*.jsondoes not exist (any more) - Backend: fixed bug when changing system password for an account while server default locale is configured to non-english
- Backend: fixed bug when changing template for an account which requires server(s) to be selected for new features
Changes in version 3.0.4 (22.09.2025):
- Frontend: e-mail isn’t required for cron jobs any more (GH-76)
- Frontend: fixed bug when editing number of parallel jobs for backup (GH-70)
- Frontend: fixed enabling/disabling of allowlists/denylists (GH-62)
- Frontend: preselecting “redirect to HTTPS” by default when enabling HTTPS
- Frontend: error wasn’t displayed when selected default backup storage hasn’t been initialized (GH-69)
- Frontend: it was possible to define non-mailbox e-mail addresses without forwarding addresses
- Frontend: added “open in new tab” icon to domain/subdomain list
- Backend: prefix wasn’t considered when checking syntax of FTP account names (GH-66)
- Backend: fixed bug when adding new subdomain in account without mail server while AutoConfig was enabled by default (GH-72)
- Backend:
http_proxy_urlwas not used when building links e.g. for password reset e-mail (GH-68) - Backend: updated SQLite to 3.50.4
- Backend: updated Expat to 2.7.2
- Backend: updated cURL to 3.16.0
- Backend: updated PCRE2 to 10.46
- Backend: deleted TLS certificates were counted in some statistics
- Backend: when editing a subdomain and enabling HTTPS (to order a Let’s Encrypt certificate), the certificate didn’t contain the “www” subdomain in SAN even if corresponding checkbox was set.
- Backend: when adding a new domain, in some cases the non-www and www subdomains had different default settings
- Backend: fixed bug when requesting MobileConfig (e-mail settings for iOS/iPadOS)
- Backend: fixed bug when deleting mailboxes when outbound limit was configured but LCPolicyd not enabled any more
- Backend: fixed bug when using external DNS resolvers
Changes in version 3.0.3 (25.08.2025):
- Frontend: DNS servers (non-external) were not selected when editing DNS template in some cases (GH-47)
- Frontend: fixed broken limit check when adding external domain (GH-49)
- Frontend: fixed display error in mailbox size when mailbox usage was >4095 MB (GH-29)
- Backend: fixed bug when editing reseller account and multiple hosting templates with same name exist
- Backend: fixed bug in check for over-provisioning of apps and website builder sites in reseller accounts
- Backend: fixed bug in SQL when deleting TLS certificates with an account (GH-38)
- Backend: fixed configuration of HTTP/2 on NGINX >=1.25.1
- Backend: removed deprecated setting
smtpd_tls_dh1024_param_fileon Postfix 3.9+ - Backend: fixed Dovecot 2.4 configuration issue with
auth_allow_cleartext(GH-42) - Backend: removing orphaned records from
TSIGKEYSandNAMESERVERS(when server has been deleted manually) - Backend: fixed bug when editing permissions of existing users (GH-52)
- Backend: TLS accounts created with LiveConfig 2.x couldn’t be used in some cases
- Backend: LCDefaults setting
dns.externalResolverwas ignored - moving contents of
/var/mail/<account>/<id>/Maildir/one level up (affecting only Debian 13 / Dovecot 2.4)
Changes in version 3.0.2 (15.08.2025):
- Frontend: save setting of dark mode / light mode per device
- Frontend: several minor color/CSS improvements and bugfixes
- Frontend: disabling “First Steps” box wasn’t possible in some cases
- Backend: added support for Debian 13 (“Trixie”)
- Backend: automatically updating configuration files when version of SMTP or IMAP software has changed (i.e. during dist-upgrade)
- Backend: fixed bug when updating reseller account settings
- Backend: fixed process leak when web terminal was closed unexpectedly
- Backend: fixed bug on certain data conditions when saving subdomain settings with SQLite
- CLI: added some diagnostic helper functions
Changes in version 3.0.1 (05.08.2025):
- Backend: don’t skip network interfaces with
vethdriver - Backend: allow also using host name for network socket interfaces (e.g.
http_ssl_socket) - Backend: update DNSSEC settings of all domains migrated with v2.18.0 which have a 4096 bit RSA key
- Installer: when upgrading from LiveConfig v2, some services where masked and disabled (lclogparse/lcpolicyd/lcsam/etc.)
- Tools: added
lcdnstool to remove orphaned DNSKEY RRs from domains
Changes in version 3.0.0 (01.08.2025):
- Frontend: fixed bug when copying DKIM key to clipboard
- Frontend: fixed bug when redirecting to external website builder URL
- Frontend: added link to privacy statement for crash reports and server statistics
- Frontend: added support to select managed TLS certificate for LiveConfig HTTPS interface
- Frontend: fixed displaying usage stats in account overview boxes
- Frontend: show lock/suspend status in account overview box (GH-15)
- Backend: fixed bug when adding site builder website
- Backend: added database integrity check for accounts with invalid mail server
- Backend: used mailbox size was returned in kB instead of MB
- Backend: license not loaded in client process when activated during onboarding
- Backend: link in password reset e-mail didn’t contain
http_url_prefix - Backend: fixed bug when automated TLS certificate has been renewed and another identical certificate already exists
- Backend: TLS certificate job wasn’t started when adding a new subdomain with automated TLS certificate
- API: configure SSO login via LCDefaults setting
login.sso.mode(GH-28) - Installer: adjust permissions for
sslcert.pem
Changes in version 3.0.0-rc12 (18.07.2025):
- Frontend: added extension management
- Frontend: added Site.pro extension
- Frontend: allow modification of php.ini settings in customer accounts (GH-32)
- Frontend: numerous minor bugs and glitches fixed
- Backend: added extension API
- Backend: allow longer names for MySQL/MariaDB databases (32 instead of 16 characters)
- Backend: fixed minor issues and adjusted API for IP group management
- Backend: immediately deploy changed quota settings to server
- Backend: don’t delete admin (reseller) settings if deleting a reseller account on admin level
- Backend: improved AppInstaller (better logging on errors, limit domain selection to current account, fixed possible erroneous domain configuration)
- Backend: fixed bug when bulk-adding domains to an account
- updated libraries (OpenSSL, cURL, SQLite)
Changes in version 3.0.0-rc11 (03.07.2025):
- Frontend: fixed display bug in web traffic table
- Frontend: fixed bug in phpMyAdmin SSO feature
- Backend: improved error reporting when creation of customer fails
- Backend: support custom “htdocs” directory (as in LC 2.x) via LC.web.HTDOCS_PATH (GH-35)
- Backend: support custom webspace root path (as in LC 2.x) (GH-36)
- Backend: allow restricting server access via web terminal (new configuration file setting
terminal=no|users|root|all) - Backend: fixed bug when deleting a mail forward address
- Backend: added “old” uploadscan.sh script to not break existing installations with PHP 5.x and suhosin
- Backend: improved and accelerated automated TLS orders (Let’s Encrypt) (GH-33)
- Backend: finished Extension API, migrating existing websites from Site.Pro extension (GH-5)
- Installer: LiveConfig not restarted after upgrade in some cases (only when some early v3 test version has been installed)
Changes in version 3.0.0-rc10 (16.06.2025):
- Frontend: when expanding domain to show subdomain list, only the first 10 subdomains where displayed
- Backend: fixed error “Failed to load dbserver id from database”
- Backend: order process for new automated TLS certificates wasn’t triggered in some cases
- Backend: migrate Let’s Encrypt accounts from LiveConfig 2.x to fix renewal of existing TLS certificates
- Backend: re-enabled endpoint for simple Nagios check (
/liveconfig/nagios-check) - API: return DNSSEC key digest (for DS record) with domain details
- API: returned no webapp name in subdomain list in some cases
Changes in version 3.0.0-rc9 (06.06.2025):
- Backend: peer IPv6 addresses were shortened unintentionally
- Backend: fixed problem with decryption of “old” passwords (early LiveConfig 2.x versions) due do extra data after alignment
- Backend: fixed bug when transferring data from/to remote LCCP servers (connection was reset under some circumstances)
- Backend: LiveConfig Client wasn’t able to submit crash reports
- Backend: fixed bug when receiving web traffic statistics for unknown (sub)domain
- Backend: fixed bug when editing any property on accounts where web statistics were enabled (rejected with “missing input”)
- Backend: fixed issue when network connection got congested during large database dump download from LCCP remote server
Changes in version 3.0.0-rc8-2 (04.06.2025):
- Backend: fixed issue when reporting detected PHP versions to LiveConfig 2.x server
- Installer: fixed bug when
lclogparse.statusfile existed from LiveConfig 1.x installation
Changes in version 3.0.0-rc8 (03.06.2025):
- Frontend: fixed bug when trying to add contact data for a new user
- Frontend: renamed “SOAP API” permission to “REST API”
- Frontend: sort PHP settings by name (within webspace settings)
- Backend: fixed and improved checks for editing user object
- Backend: check limits when adding a new user
- Backend: improved error logging when sending e-mail fails
- Backend: fixed crash (in very rare cases) after execution of external commands through Lua
- Backend: admin user may add unlimited users
- API: adjusted check for valid user names
- Installer: LiveConfig service wasn’t restarted after upgrade