Cannot SSH... Really Frustrating!

xaze

Well-Known Member
Jul 10, 2003
50
0
156
Okay, this is the timeline of what happened:

1) Everything is fine. I can login as root and login to WHM as root.

2) I change the root password using the "change root password" tool in the WHM admin area.

3) I exit and login to WHM using my new password. Everything is great

4) I now cannot login to the server via SSH with the old or new root password!


Steps I have taken to try to fix this:

1) Tried old root password

2) Tried new root password

3) Changed my password (via WHM) back to the old password and tried to login

4) Changed my password (via WHM) to a new password and tried to login

How do I fix this problem!? I have not been able to SSH for a month and it is frustrating. I am running CentOS 4.x

Please give me some ideas on how to fix this
 

dave9000

Well-Known Member
Apr 7, 2003
888
1
168
arkansas
cPanel Access Level
Root Administrator
I would log a ticket with cpanel on this issue so they can take a look at it

And in the future if you need to change root password use SSH to do it with the passwd command.

However to answer your question on how to get SSH back you will need single user console access. You or your datacenter (whoever can physically sit down at the machine) will have to reboot and enter single user maintance mode and reset the root password.
 

24x7team

Well-Known Member
Jan 16, 2006
67
0
156
India
try login again and again via ssh and ask the Dc at the same time to check the server logs, should diplay the reason....
 

xaze

Well-Known Member
Jul 10, 2003
50
0
156
I can check the server logs because I have root access to the file system via WHM (I have a plugin installed that lets me do this).

I just need to know, where are the logs I need to check?
 

xaze

Well-Known Member
Jul 10, 2003
50
0
156
/var/log/secure just contains a whole bunch of these lines:

Code:
May 21 01:02:28 server1 xinetd[4832]: START: imap pid=22511 from=127.0.0.1
May 21 01:10:50 server1 xinetd[4832]: START: imap pid=22789 from=127.0.0.1
May 21 01:19:12 server1 xinetd[4832]: START: imap pid=22875 from=127.0.0.1
 

xaze

Well-Known Member
Jul 10, 2003
50
0
156
Given that I have root file access, is there any way to change my password? For example, is there a perl script I could make and execute as root that would change the password for me?
 

24x7team

Well-Known Member
Jan 16, 2006
67
0
156
India
The problem is not writing aprl scrupt, you have the acess to root via WHM but ssh does not recognise it, that means the problem is with SSH and may be some missing module.

So you have to

tail -f /var/log/messages and then try login to ssh, you said you do not have the access to ssh so requested as DC at the same time to check this log.

Must be some PAM module missing or something else.
 

xaze

Well-Known Member
Jul 10, 2003
50
0
156
Nothing in /var/log/messages says anything that seems suspect


The only thing related root is lines like this:

May 21 03:30:01 server1 crond(pam_unix)[28153]: session closed for user root

And then this

May 21 03:33:07 server1 pure-ftpd: ([email protected]) [INFO] New connection from 127.0.0.1
May 21 03:33:07 server1 pure-ftpd: ([email protected]) [INFO] Logout.
May 21 03:33:10 server1 crond(pam_unix)[28386]: session closed for user parahost
 

24x7team

Well-Known Member
Jan 16, 2006
67
0
156
India
Perhaps you need a one time admin now to check...else post a ticket to cpanel support, see if they can help you ...