Server broken - can't login

[Aruta]

This is godaddy dedicated server.
If i try to login as root, i have timeout. ( but if i enter wrong password, it say wrong pass)
ssh hangs after you enter login
if i try to login as regular user, it always say wrong pass.

Receiving this errors on email:

ftpd failed @ Wed May 16 14:59:10 2012. A restart was attempted automagically.

Service Check Method: [socket connect]

Reason: Timeout while trying to get data from service: Died at /usr/local/cpanel/Cpanel/TailWatch/ChkServd.pm line 607, <$socket_scc> line 7.


Number of Restart Attempts: 1

Startup Log: Starting pure-config.pl: Running: /usr/sbin/pure-ftpd -O clf:/var/log/xferlog --daemonize -A -c50 -B -C8 -D -E -fftp -H -I15 -lextauth:/var/run/ftpd.sock -L10000:8 -m4 -s -U133:022 -u100 -i -Oxferlog:/usr/local/apache/domlogs/ftpxferlog -k99 -Z -Y1 -JHIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3
[ OK ]
Starting pure-authd:

Syslog Messages: May 16 14:59:34 ip-184-168-***-*** pure-ftpd: (?@212.50.***.***) [INFO] Logout.
May 16 14:59:41 ip-184-168-***-*** pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
May 16 15:00:01 ip-184-168-***-*** pure-ftpd: nss_ldap: failed to bind to LDAP server ldap://127.0.0.1/: Can't contact LDAP server
May 16 15:00:01 ip-184-168-***-*** pure-ftpd: nss_ldap: failed to bind to LDAP server ldap://127.0.0.1/: Can't contact LDAP server
May 16 15:00:01 ip-184-168-***-*** pure-ftpd: nss_ldap: reconnecting to LDAP server (sleeping 4 seconds)...
May 16 15:00:05 ip-184-168-***-*** pure-ftpd: nss_ldap: failed to bind to LDAP server ldap://127.0.0.1/: Can't contact LDAP server
May 16 15:00:05 ip-184-168-***-*** pure-ftpd: nss_ldap: reconnecting to LDAP server (sleeping 8 seconds)...
May 16 15:00:06 ip-184-168-***-*** pure-ftpd: (?@212.50.***.***) [INFO] New connection from 212.50.***.***
May 16 15:00:10 ip-184-168-***-*** pure-ftpd: (?@212.50.***.***) [WARNING] Authentication failed for user [dajjer09]
May 16 15:00:10 ip-184-168-***-*** pure-ftpd: (?@212.50.***.***) [INFO] Logout.
May 16 15:00:13 ip-184-168-***-*** pure-ftpd: nss_ldap: failed to bind to LDAP server ldap://127.0.0.1/: Can't contact LDAP server

I'm trying to garher all information for now.

What options do i have to regain controll?
Thanks.

[ruzbehraja]

Do you have an LDAP server for password authentication?

This does not seem to be a firewall issue. More like some misconfiguration.

[hoststop]

The best way to regain access is connecting the server via KVM. Contact your DC and ask them to provide with KVM access else ask your webhost. If you have KVM access, check for PasswordAuthentication is set to yes in ssh config. Look for /var/log/messages OR /var/log/secure to troubleshoot.

[Aruta]

Thanks for replies.
We found admin who fixed this. Don't know much what he did and how logged.

Yes, this was misconfiguration - another guy was trying to install red5.

[singh9211]

Hi there,

I am gettting the same, can some one please let me know the solution to it. Receiving lot of emails regarding ftpd & imapd failed notification.


+++++++++++++++
ERROR MESSAGE
+++++++++++++++


ftpd failed @ Sat Jul 28 18:11:12 2012. A restart was attempted automagically.

Service Check Method: [socket connect]

Reason: Timeout while trying to get data from service: Died at /usr/local/cpanel/Cpanel/TailWatch/ChkServd.pm line 607.


Number of Restart Attempts: 6

Startup Log: Starting pure-config.pl: Running: /usr/sbin/pure-ftpd -O clf:/var/log/xferlog --daemonize -A -c50 -B -C8 -D -E -fftp -H -I15 -lextauth:/var/run/ftpd.sock -L10000:8 -m4 -p30000:50000 -s -U133:022 -u100 -i -Oxferlog:/usr/local/apache/domlogs/ftpxferlog -k99 -Z -Y1 -JHIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3
[ OK ]
Starting pure-authd:


Syslog Messages: Jul 28 17:07:42 cloud pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
Jul 28 17:07:50 cloud pure-ftpd: (?@127.0.0.1) [INFO] __cpanel__service__auth__ftpd__lcmktXu3w27Suf9Eu3EApPmvMVdOiYfd16T_grEwchcPcJ4tM4CWCfGXzqVvJdQw is now logged in
Jul 28 17:07:52 cloud pure-ftpd: (__cpanel__service__auth__ftpd__lcmktXu3w27Suf9Eu3EApPmvMVdOiYfd16T_grEwchcPcJ4tM4CWCfGXzqVvJdQw@127.0.0.1) [INFO] Logout.
Jul 28 17:13:50 cloud pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
Jul 28 17:13:50 cloud pure-ftpd: (?@127.0.0.1) [INFO] __cpanel__service__auth__ftpd__D5ONTcgN2Ym9Fhmv0iMrxvCdJmqJ2DwPbkUi_wXC1EShAhfCIBQDzlFT4FEq_eMK is now logged in
Jul 28 17:13:51 cloud pure-ftpd: (__cpanel__service__auth__ftpd__D5ONTcgN2Ym9Fhmv0iMrxvCdJmqJ2DwPbkUi_wXC1EShAhfCIBQDzlFT4FEq_eMK@127.0.0.1) [INFO] Logout.
Jul 28 17:21:26 cloud pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1
Jul 28 17:23:34 cloud pure-ftpd: (?@127.0.0.1) [INFO] Logout.
Jul 28 17:29:01 cloud pure-ftpd: (?@127.0.0.1) [INFO] New connection from 127.0.0.1


=========================================

imap failed @ Sat Jul 28 17:37:46 2012. A restart was attempted automagically.

Service Check Method: [socket connect]

Reason: Timeout while trying to get data from service: Died at /usr/local/cpanel/Cpanel/TailWatch/ChkServd.pm line 607.


Number of Restart Attempts: 2

Syslog Messages: Jul 28 16:48:47 cloud dovecot: imap-login: Login: user=<xxxx@xxxxxx.com>, method=PLAIN,
Jul 28 16:48:47 cloud dovecot: IMAP(xxxx@xxxxxx.com): Disconnected: Logged out bytes=56/894
Jul 28 16:49:08 cloud dovecot: POP3(xxxx@xxxxxx.com): Disconnected: Logged out top=0/0, retr=0/0, del=0/570, size=1019816, bytes=18/12953
Jul 28 16:49:28 cloud dovecot: POP3(xxxx@xxxxxx.com): Disconnected: Logged out top=0/0, retr=0/0, del=0/242, size=215352, bytes=18/5408
Jul 28 16:49:29 cloud dovecot: pop3-login: Login: user=<xxxx@xxxxxx.com>, method=PLAIN,
Jul 28 16:49:30 cloud dovecot: pop3-login: Login: user=<xxxx@xxxxxx.com>, method=PLAIN, ,
Jul 28 16:49:30 cloud dovecot: pop3-login: Login: user=<xxxx@xxxxxx.com>, method=PLAIN,
Jul 28 16:49:45 cloud dovecot: pop3-login: Login: user=<xxxx@xxxxxx.com>, method=PLAIN,
Jul 28 16:49:46 cloud dovecot: POP3(xxxx@xxxxxx.com): Disconnected: Logged out top=0/0, retr=0/0, del=0/77, size=165647, bytes=18/1819
Jul 28 16:52:40 cloud dovecot: POP3(xxxx@xxxxxx.com): Disconnected: Logged out top=0/0, retr=0/0, del=0/242, size=215352, bytes=18/5408

[cPanelTristan]

You are having the same issue in that you cannot log into the machine or that you are receiving failure messages only? Basically, do you have root SSH access and root WHM access working for the machine?

[singh9211]

You are having the same issue in that you cannot log into the machine or that you are receiving failure messages only? Basically, do you have root SSH access and root WHM access working for the machine?

Sorry, I am able log into the machine, just the problem is that i am receiving lot of such failure notifications. Root SSH access & root WHM are working fine.

[cPanelTristan]

Do you have a firewall running? Can you try taking it down temporarily to see the results?