Web Hosting Talk







View Full Version : Major, MAJOR Problem With Server - Need Advice!


CISupport
11-21-2004, 12:17 AM
Hello,

I'm suffering from all kinds of serious problems right now on the server, apparently stemming from nothing.

WHM will NOT WORK.
mySQL/Email will NOT WORK.

I cannot access my server via root (it's not that the password is wrong, it just won't connect).

In cPanel, I get the following error:

CP-Wrap Critcal Error (signal 11 from wrapped program)! This may indicate a corrupt admin binary in /usr/local/cpanel/bin/ / unlimited

assistanz247
11-21-2004, 12:19 AM
Your server needs admin job < 'nuff said >

CISupport
11-21-2004, 12:19 AM
Thing is, I've managed my server for 2 years now with no problem. This is a sudden error.

Everything is secure and NO UNNECESSARY PROCESSES WERE RUN TODAY.

So, there's no reason why this should be happening!

Coolraul
11-21-2004, 12:21 AM
Get someone with a proven track record. I could be like tech lollu and say I will fix it but in fact I don't have a clue and would have to go to my admins.

assistanz247
11-21-2004, 12:22 AM
Seems some sort of corrupted binary issue and that needs to be checked in the server. Not sure what causes this error but I can find out if you give me shell access.

IGobyTerry
11-21-2004, 12:23 AM
chmod 755 /usr/bin/perl should fix the error.

If that doesn't run;

chmod u+rws /usr/local/cpanel/bin/cpwrap
/scripts/upcp --force

CISupport
11-21-2004, 12:26 AM
I can't get in to SSH and do that; it won't let me do that via WinSCP.

assistanz247
11-21-2004, 12:28 AM
Login to the WHM and restart SSH service and make a try to login to the server. If not your IP will be listed in the /etc/hosts.deny.

CISupport
11-21-2004, 12:28 AM
As I said, WHM isn't working either.

IGobyTerry
11-21-2004, 12:29 AM
Originally posted by CISupport
I can't get in to SSH and do that; it won't let me do that via WinSCP.

You can't get in through either SSH, or WHM? Try telnet. Once you get it fixed though immediately change your root password.

CISupport
11-21-2004, 12:34 AM
Not sure how to use telnet...

This is a huge problem. I'm now timed out from WinSCP and none of the sites are working.

assistanz247
11-21-2004, 12:35 AM
Through winscp execute this command,

/scripts/restartsrv ssh

CISupport
11-21-2004, 12:37 AM
I just said I'm logged out of that now :(

assistanz247
11-21-2004, 12:40 AM
Now the only way is to contact the DC and reboot your server.

CISupport
11-21-2004, 12:42 AM
I have several times. They insisted a reboot would "make things worse."

assistanz247
11-21-2004, 12:45 AM
Ask them to get into the server in single user mode and do manual FSCK. I think your filesystem may be got corrupted or may be a disk issue.

Steven
11-21-2004, 12:48 AM
Everything is secure and NO UNNECESSARY PROCESSES WERE RUN TODAY.


I have herd that one to many times. Your server is never 100% secure. There is always the chance it could be compromised. And judging from the post i am kind of leery of beliving it was "secure"

assistanz247
11-21-2004, 12:50 AM
Yes I too agree with thelinuxguy.

CISupport
11-21-2004, 12:52 AM
The issue was that I never did anything to make it "easier" to get in.

So, any problem would be how it was initially given to me, meaning, the fault of no one.

Simply put, I know I'm not to blame for anything that happened.


Ok good! They responded and put it back up.

However, the earlier problems are not gone.....now they are.

assistanz247
11-21-2004, 12:56 AM
Server security is an essential thing for running a hosting business. Frequent security audits are necessary to get the 99.99% uptime. There should be an awareness about this to all the hosting community people. I am not blaming you :)

Gold1234
11-21-2004, 08:50 AM
What sort of thing could cause this kind of problem?

Steven
11-21-2004, 01:30 PM
Originally posted by CISupport
The issue was that I never did anything to make it "easier" to get in.

So, any problem would be how it was initially given to me, meaning, the fault of no one.

Simply put, I know I'm not to blame for anything that happened.


Ok good! They responded and put it back up.

However, the earlier problems are not gone.....now they are.


A server is NOT secure unless you secure it so therefore if you did not secure it then you did make it easier to get in.

CISupport
11-21-2004, 09:16 PM
Well, obviously i installed the basic security tools (firewall, rootkit, etc). But, I did nothing to expose the server to intruders.

And, the same problem happened again. I really am at a loss of what to do.

magnafix
11-21-2004, 09:51 PM
Can the DC get a terminal and see if the screen is covreed in hardware failure messages? Can you download /var/log/messages with winscp?