View Full Version : Major, MAJOR Problem With Server - Need Advice!
CISupport 11-21-2004, 12:17 AM Hello,
I'm suffering from all kinds of serious problems right now on the server, apparently stemming from nothing.
WHM will NOT WORK.
mySQL/Email will NOT WORK.
I cannot access my server via root (it's not that the password is wrong, it just won't connect).
In cPanel, I get the following error:
CP-Wrap Critcal Error (signal 11 from wrapped program)! This may indicate a corrupt admin binary in /usr/local/cpanel/bin/ / unlimited
assistanz247 11-21-2004, 12:19 AM Your server needs admin job < 'nuff said >
CISupport 11-21-2004, 12:19 AM Thing is, I've managed my server for 2 years now with no problem. This is a sudden error.
Everything is secure and NO UNNECESSARY PROCESSES WERE RUN TODAY.
So, there's no reason why this should be happening!
Coolraul 11-21-2004, 12:21 AM Get someone with a proven track record. I could be like tech lollu and say I will fix it but in fact I don't have a clue and would have to go to my admins.
assistanz247 11-21-2004, 12:22 AM Seems some sort of corrupted binary issue and that needs to be checked in the server. Not sure what causes this error but I can find out if you give me shell access.
IGobyTerry 11-21-2004, 12:23 AM chmod 755 /usr/bin/perl should fix the error.
If that doesn't run;
chmod u+rws /usr/local/cpanel/bin/cpwrap
/scripts/upcp --force
CISupport 11-21-2004, 12:26 AM I can't get in to SSH and do that; it won't let me do that via WinSCP.
assistanz247 11-21-2004, 12:28 AM Login to the WHM and restart SSH service and make a try to login to the server. If not your IP will be listed in the /etc/hosts.deny.
CISupport 11-21-2004, 12:28 AM As I said, WHM isn't working either.
IGobyTerry 11-21-2004, 12:29 AM Originally posted by CISupport
I can't get in to SSH and do that; it won't let me do that via WinSCP.
You can't get in through either SSH, or WHM? Try telnet. Once you get it fixed though immediately change your root password.
CISupport 11-21-2004, 12:34 AM Not sure how to use telnet...
This is a huge problem. I'm now timed out from WinSCP and none of the sites are working.
assistanz247 11-21-2004, 12:35 AM Through winscp execute this command,
/scripts/restartsrv ssh
CISupport 11-21-2004, 12:37 AM I just said I'm logged out of that now :(
assistanz247 11-21-2004, 12:40 AM Now the only way is to contact the DC and reboot your server.
CISupport 11-21-2004, 12:42 AM I have several times. They insisted a reboot would "make things worse."
assistanz247 11-21-2004, 12:45 AM Ask them to get into the server in single user mode and do manual FSCK. I think your filesystem may be got corrupted or may be a disk issue.
Steven 11-21-2004, 12:48 AM Everything is secure and NO UNNECESSARY PROCESSES WERE RUN TODAY.
I have herd that one to many times. Your server is never 100% secure. There is always the chance it could be compromised. And judging from the post i am kind of leery of beliving it was "secure"
assistanz247 11-21-2004, 12:50 AM Yes I too agree with thelinuxguy.
CISupport 11-21-2004, 12:52 AM The issue was that I never did anything to make it "easier" to get in.
So, any problem would be how it was initially given to me, meaning, the fault of no one.
Simply put, I know I'm not to blame for anything that happened.
Ok good! They responded and put it back up.
However, the earlier problems are not gone.....now they are.
assistanz247 11-21-2004, 12:56 AM Server security is an essential thing for running a hosting business. Frequent security audits are necessary to get the 99.99% uptime. There should be an awareness about this to all the hosting community people. I am not blaming you :)
Gold1234 11-21-2004, 08:50 AM What sort of thing could cause this kind of problem?
Steven 11-21-2004, 01:30 PM Originally posted by CISupport
The issue was that I never did anything to make it "easier" to get in.
So, any problem would be how it was initially given to me, meaning, the fault of no one.
Simply put, I know I'm not to blame for anything that happened.
Ok good! They responded and put it back up.
However, the earlier problems are not gone.....now they are.
A server is NOT secure unless you secure it so therefore if you did not secure it then you did make it easier to get in.
CISupport 11-21-2004, 09:16 PM Well, obviously i installed the basic security tools (firewall, rootkit, etc). But, I did nothing to expose the server to intruders.
And, the same problem happened again. I really am at a loss of what to do.
magnafix 11-21-2004, 09:51 PM Can the DC get a terminal and see if the screen is covreed in hardware failure messages? Can you download /var/log/messages with winscp?
|