HTTP/1.1 401 Access Denied Still Working

[jonwatson]

Hi All,

Any ideas what this means? I see this error when I attempt to set up a DNS cluster between two cPanel (Full, not DNS only) machines.

I've verified that all the WHM and cPanel ports are open on both machines. Googling or searching these forums for this error turns up nothing.

I have verified that the access has is correct.

There are no other messages.

Any tips?

Thanks

Jon

[cass]

I've the SAME EXACT problem.

from one day to another... it started to give this error.
it's a 3 server dns cluster (full servers), two of them get this error in between, the other two see the other with no problem.

ie. server A, B, C
A to B ok.
A to C problem
B to A ok.
B to C ok.
C to A problem
C to B ok.

any idea?

Additionally i got (on one side say server A to C)
HTTP/1.0 900 NET OR SSL ERROR /usr/local/cpanel/whostmgr/docroot/cgi/clusterstatus.cgi 10146: open_tcp_connection: failed

and like this guy (on the other side, say server C to A)
HTTP/1.1 401 Access Denied Still Working

ideas?

[Metro2]

I',m now running into this too after adding a third server tonight. Everything was fine with clustering my first two servers, but now after adding the third I'm dealing with that same as you guys.

STATUS - HTTP/1.1 401 Access Denied Still Working
Dns Role - Requires version 8.9 or later

And I'm running bind 9.2.4 on all servers.

[astormo]

Have the same exact problem too. Im trying to cluster up 3 DNS servers, but the third one fails.

HTTP/1.0 900 NET OR SSL ERROR /usr/local/cpanel/whostmgr/docroot/cgi/clusterstatus.cgi 68588: open_tcp_connection: failed `xxx.xxx.xx.xx', 2087 (Connection refused)

Did anyone find a solution to this problem?

[cPanelDavidG]

Have the same exact problem too. Im trying to cluster up 3 DNS servers, but the third one fails.

HTTP/1.0 900 NET OR SSL ERROR /usr/local/cpanel/whostmgr/docroot/cgi/clusterstatus.cgi 68588: open_tcp_connection: failed `xxx.xxx.xx.xx', 2087 (Connection refused)

Did anyone find a solution to this problem?

First thing I would do is make sure I could connect from the one server to the other server via SSH, and make sure there are no firewall issues interfering with a connection.

Also, try re-installing the Net::SSLeay Perl module via:

/scripts/perlinstaller --force Net::SSLeay

[jenlepp]

I'm getting the same thing, too, but only one way - feeding servers can talk to DNS, but DNS can't talk back.

Weird. But works. [shrug]

[KrystalS]

This is often caused by Brute force detection.

Check your cpanel login log :

# tail -f /usr/local/cpanel/logs/login_log

*.*.*.*, - root [06/29/2009:11:22:56 -0000] "GET /scripts2/showversion? HTTP/ 1.0" DEFERRED LOGIN whostmgrd: brute force attempt has locked out account: root

Then check your brute force detection section in cpanel and check both servers to see if there is a problem - and add each ip to the white list.

[EEKdood]

I'm having the same problem with one-way communication and this 401 error in the clustering area.

My login_log shows:

xxx.xxx.xxx.xxx - root [07/10/2009:21:10:58 -0000] "GET /scripts2/showversion? HTTP/1.0" FAILED LOGIN whostmgrd: user access hash file is empty

This, I assume, is because when adding a server to the cluster, the reverse relationship is added as well.

I fixed the issue by creating a new Remote Access Key and re-creating the cluster relationships. It seems that there is no RAC by default and the clustering software will create a reverse relationship even though it does not have a key available.

NO MORE ERRORS! Woot!

[willluongo]

In my case (where only the receiving server was showing the errors), I found the issue was caused by an incorrect A record for the hostname of the sending server. This caused an IP other than the primary shared IP to be used, which caused the error. Updating the A record and reconfiguring the cluster resolved the issue.

[dalemon]

Hi,

I had the same error between a DNS only server and a WHM server.

I solved the problem by going to cPHulk Brute Force Protection and adding the peer IP into the white list.

This solved my problem
Thank you