LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 06-23-2008, 04:36 PM   #1
RobertNikic
LQ Newbie
 
Registered: Jun 2008
Posts: 27

Rep: Reputation: 15
Question Odd [URGENT] cPanel/WHM Server Issue


Hi,

I have a fresh install of CentOS 4.6 (final) with cPanel/WHM installed. Once
the server boots up, everything seems to be going good, Although cpsrvd fails,
throughout the hour since the boot, the server seems to stop. cPanel/WHM is not
accessible nor is ssh, basically i think the services all stop. Within 1-2
hours of this happening it goes back to normal and repeats again.

I do not have a firewall installed. I disabled all firewalls known.

(i have reformatted up to 3-4 times to try and fix this issue, but same
proccess repeats)

- boot up server
- cpsrvd fails
- cPanel works normally
- within a time period (1 hour or less) cPanel/WHM is not accessable nor can i
access SSH.
- within 1-2 hours everything goes back to normal.
- same proccess repeats.

(yesturday it lasted 22 hours successfully) but the same proccess repeated
today.

Last edited by RobertNikic; 06-23-2008 at 04:38 PM.
 
Old 06-23-2008, 04:47 PM   #2
billymayday
LQ Guru
 
Registered: Mar 2006
Location: Sydney, Australia
Distribution: Fedora, CentOS, OpenSuse, Slack, Gentoo, Debian, Arch, PCBSD
Posts: 6,678

Rep: Reputation: 122Reputation: 122
If you have services dying/not starting properly, there should be something int the relevant logs. What are they saying?
 
Old 06-23-2008, 04:50 PM   #3
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981
firstly, please don't use words like "urgent", it's generally considered rude in a voluntary community.

secondly, what sort of architecture are you running? is this a dedicated colo server, a vm i guess? it sounds a lot more like a network issue than anythign on the server itself. a duplicate IP which you get lucky from sometimes when the arp entry times out on the local router. that fits in just about exactly with the symptoms you describe, and I can't think of any other good reason. You might want to do something like set up a continual ping. every few seconds, ping google.com and write the output to a file. If you then get disconnected from the server, once you get back in you would be able to look at the file and see if it could ping anything. also does the server reboot? anythign added to dmesg or /var/log/messages?
 
Old 06-23-2008, 05:03 PM   #4
RobertNikic
LQ Newbie
 
Registered: Jun 2008
Posts: 27

Original Poster
Rep: Reputation: 15
Hi,

I apoglozie.

I am running a AMD Athlon 64 X2 3800+ Dual Core Processor at my location meaning i have full access to it and i can restart it.

I am running 3 diffrent ip addresses on it.

SERVER1 IP ADDRESS
DNS1 IP ADDRESS
DNS2 IP ADDRESS

and it cannot also find \var\log\messsages on the server.
(note: im not very good with linux)

EDIT: i restarted the server and it worked for about 5 minutes or so?
do you know what command i can do so i can check my log messages so i can see what the issue is?

Last edited by RobertNikic; 06-23-2008 at 05:09 PM.
 
Old 06-23-2008, 05:11 PM   #5
billymayday
LQ Guru
 
Registered: Mar 2006
Location: Sydney, Australia
Distribution: Fedora, CentOS, OpenSuse, Slack, Gentoo, Debian, Arch, PCBSD
Posts: 6,678

Rep: Reputation: 122Reputation: 122
tail /var/log/messages (this gives last 10 entries)

or perhaps tail -20 /var/log/messages (last 20 entries)

or

grep sshd /var/log/messages

to get all entries with sshd in the line
 
Old 06-23-2008, 05:19 PM   #6
RobertNikic
LQ Newbie
 
Registered: Jun 2008
Posts: 27

Original Poster
Rep: Reputation: 15
[root@server1 ~]# tail /var/log/messages
Jun 23 18:14:51 server1 portsentry[3609]: adminalert: ERROR: No UDP ports supplied in config file. Aborting
Jun 23 18:14:51 server1 portsentry[3609]: adminalert: ERROR: could not go into PortSentry mode. Shutting down.
Jun 23 18:14:51 server1 portsentry[3609]: securityalert: Psionic PortSentry is shutting down
Jun 23 18:14:51 server1 portsentry[3609]: adminalert: Psionic PortSentry is shutting down
Jun 23 18:14:51 server1 portsentry: Starting portsentry -udp: succeeded
Jun 23 18:14:52 server1 fstab-sync[3614]: removed all generated mount points
Jun 23 18:14:52 server1 fstab-sync[4226]: added mount point /media/cdrecorder for /dev/hda
Jun 23 18:14:59 server1 login(pam_unix)[3621]: session opened for user root by LOGIN(uid=0)
Jun 23 18:14:59 server1 -- root[3621]: ROOT LOGIN ON tty1
Jun 23 18:15:32 server1 sshd(pam_unix)[4415]: session opened for user root by (uid=0)

_________________________________________________________________________

[root@server1 ~]# tail -20 /var/log/messages
Jun 23 18:14:50 server1 startmailman: Starting Mailman's master qrunner.
Jun 23 18:14:50 server1 cpanel: Starting mailman services: succeeded
Jun 23 18:14:50 server1 messagebus: messagebus startup succeeded
Jun 23 18:14:51 server1 haldaemon: haldaemon startup succeeded
Jun 23 18:14:51 server1 portsentry[3604]: adminalert: Psionic PortSentry 1.1 is starting.
Jun 23 18:14:51 server1 portsentry[3605]: adminalert: Going into listen mode on TCP port: 1
Jun 23 18:14:51 server1 portsentry[3605]: adminalert: Going into listen mode on TCP port: 111
Jun 23 18:14:51 server1 portsentry[3605]: adminalert: PortSentry is now active and listening.
Jun 23 18:14:51 server1 portsentry: Starting portsentry -tcp: succeeded
Jun 23 18:14:51 server1 portsentry[3608]: adminalert: Psionic PortSentry 1.1 is starting.
Jun 23 18:14:51 server1 portsentry[3609]: adminalert: ERROR: No UDP ports supplied in config file. Aborting
Jun 23 18:14:51 server1 portsentry[3609]: adminalert: ERROR: could not go into PortSentry mode. Shutting down.
Jun 23 18:14:51 server1 portsentry[3609]: securityalert: Psionic PortSentry is shutting down
Jun 23 18:14:51 server1 portsentry[3609]: adminalert: Psionic PortSentry is shutting down
Jun 23 18:14:51 server1 portsentry: Starting portsentry -udp: succeeded
Jun 23 18:14:52 server1 fstab-sync[3614]: removed all generated mount points
Jun 23 18:14:52 server1 fstab-sync[4226]: added mount point /media/cdrecorder for /dev/hda
Jun 23 18:14:59 server1 login(pam_unix)[3621]: session opened for user root by LOGIN(uid=0)
Jun 23 18:14:59 server1 -- root[3621]: ROOT LOGIN ON tty1
Jun 23 18:15:32 server1 sshd(pam_unix)[4415]: session opened for user root by (uid=0)
 
Old 06-23-2008, 05:28 PM   #7
billymayday
LQ Guru
 
Registered: Mar 2006
Location: Sydney, Australia
Distribution: Fedora, CentOS, OpenSuse, Slack, Gentoo, Debian, Arch, PCBSD
Posts: 6,678

Rep: Reputation: 122Reputation: 122
Tail shows the end of the log file (hence the name), but there isn't a lot of point posting the results unless something's just happened, like a service has died

Similalry for the grep version, if you have a problem with a service, grep for that service
 
Old 06-23-2008, 05:34 PM   #8
RobertNikic
LQ Newbie
 
Registered: Jun 2008
Posts: 27

Original Poster
Rep: Reputation: 15
hmm. i appricate your help very much.

everything just went offline again. i did the tail -20 /var/log/messages and its not showing me any errors at all.

what do you suggust that i do?
 
Old 06-23-2008, 05:43 PM   #9
billymayday
LQ Guru
 
Registered: Mar 2006
Location: Sydney, Australia
Distribution: Fedora, CentOS, OpenSuse, Slack, Gentoo, Debian, Arch, PCBSD
Posts: 6,678

Rep: Reputation: 122Reputation: 122
I've never used cpanel Where does it log to?
 
Old 06-23-2008, 05:43 PM   #10
RobertNikic
LQ Newbie
 
Registered: Jun 2008
Posts: 27

Original Poster
Rep: Reputation: 15
[root@server1 ~]# tail /var/log/messages
Jun 23 18:14:51 server1 portsentry[3609]: adminalert: ERROR: No UDP ports supplied in config file. Aborting
Jun 23 18:14:51 server1 portsentry[3609]: adminalert: ERROR: could not go into PortSentry mode. Shutting down.
Jun 23 18:14:51 server1 portsentry[3609]: securityalert: Psionic PortSentry is shutting down
Jun 23 18:14:51 server1 portsentry[3609]: adminalert: Psionic PortSentry is shutting down

Jun 23 18:14:51 server1 portsentry: Starting portsentry -udp: succeeded
Jun 23 18:14:52 server1 fstab-sync[3614]: removed all generated mount points
Jun 23 18:14:52 server1 fstab-sync[4226]: added mount point /media/cdrecorder for /dev/hda
Jun 23 18:14:59 server1 login(pam_unix)[3621]: session opened for user root by LOGIN(uid=0)
Jun 23 18:14:59 server1 -- root[3621]: ROOT LOGIN ON tty1
Jun 23 18:15:32 server1 sshd(pam_unix)[4415]: session opened for user root by (uid=0)

________________________

the above in red, could that be whats casuing everything to go offline and un accessible?
 
Old 06-23-2008, 05:55 PM   #11
RobertNikic
LQ Newbie
 
Registered: Jun 2008
Posts: 27

Original Poster
Rep: Reputation: 15
Hi,

i was just looking at my IP ADDRESS usage, i noticed there are a few users using my DNS IP's for their account.

Could this be casuing this whole mess?
 
Old 06-23-2008, 05:56 PM   #12
billymayday
LQ Guru
 
Registered: Mar 2006
Location: Sydney, Australia
Distribution: Fedora, CentOS, OpenSuse, Slack, Gentoo, Debian, Arch, PCBSD
Posts: 6,678

Rep: Reputation: 122Reputation: 122
SO does that mean you haven't configured portsentry?
 
Old 06-23-2008, 05:57 PM   #13
RobertNikic
LQ Newbie
 
Registered: Jun 2008
Posts: 27

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by billymayday View Post
SO does that mean you haven't configured portsentry?
honestly. i just installed CENTOS 4 and disabled all firewalls and then installed cPanel.

i have no idea what port sentry is or how to configure it

can you help me out?
 
Old 06-23-2008, 06:04 PM   #14
billymayday
LQ Guru
 
Registered: Mar 2006
Location: Sydney, Australia
Distribution: Fedora, CentOS, OpenSuse, Slack, Gentoo, Debian, Arch, PCBSD
Posts: 6,678

Rep: Reputation: 122Reputation: 122
Sorry - typing while you posted.

I don't use portsentry, but googling suggested a look in /var/portsentry/portsentry.blocked.

I'm confused by you last post - do you mean a few users are doing DNS lookups on your mackine - shouldn't really be an issue
 
Old 06-23-2008, 06:05 PM   #15
RobertNikic
LQ Newbie
 
Registered: Jun 2008
Posts: 27

Original Poster
Rep: Reputation: 15
EDIT: removed
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
cpanel/whm initial setup - Do I need a separate DNS server? jlgreer1 Linux - Server 5 06-08-2008 09:24 AM
unexpected reboot - linux server - centos 5.1 - cPanel / WHM GiotisSL Linux - Server 1 03-28-2008 05:42 PM
free alternatives to whm/cpanel steve51184 Linux - Server 2 03-24-2008 01:18 PM
cPanel and WHM (router + dynamic ip) Cemtey Linux - Networking 1 08-24-2007 09:17 AM
addon domains in cpanel..urgent issue I_AM Linux - General 1 11-03-2006 10:30 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 07:59 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration