Cannot SSH... Really Frustrating!

[xaze]

Okay, this is the timeline of what happened:

1) Everything is fine. I can login as root and login to WHM as root.

2) I change the root password using the "change root password" tool in the WHM admin area.

3) I exit and login to WHM using my new password. Everything is great

4) I now cannot login to the server via SSH with the old or new root password!


Steps I have taken to try to fix this:

1) Tried old root password

2) Tried new root password

3) Changed my password (via WHM) back to the old password and tried to login

4) Changed my password (via WHM) to a new password and tried to login

How do I fix this problem!? I have not been able to SSH for a month and it is frustrating. I am running CentOS 4.x

Please give me some ideas on how to fix this

 

[dave9000]

I would log a ticket with cpanel on this issue so they can take a look at it

And in the future if you need to change root password use SSH to do it with the passwd command.

However to answer your question on how to get SSH back you will need single user console access. You or your datacenter (whoever can physically sit down at the machine) will have to reboot and enter single user maintance mode and reset the root password.

 

[24x7team]

try login again and again via ssh and ask the Dc at the same time to check the server logs, should diplay the reason....

 

[xaze]

I can check the server logs because I have root access to the file system via WHM (I have a plugin installed that lets me do this).

I just need to know, where are the logs I need to check?

 

[mctDarren]

/var/log/secure

 

[xaze]

/var/log/secure just contains a whole bunch of these lines:

May 21 01:02:28 server1 xinetd[4832]: START: imap pid=22511 from=127.0.0.1
May 21 01:10:50 server1 xinetd[4832]: START: imap pid=22789 from=127.0.0.1
May 21 01:19:12 server1 xinetd[4832]: START: imap pid=22875 from=127.0.0.1

 

[xaze]

Given that I have root file access, is there any way to change my password? For example, is there a perl script I could make and execute as root that would change the password for me?

 

[24x7team]

The problem is not writing aprl scrupt, you have the acess to root via WHM but ssh does not recognise it, that means the problem is with SSH and may be some missing module.

So you have to

tail -f /var/log/messages and then try login to ssh, you said you do not have the access to ssh so requested as DC at the same time to check this log.

Must be some PAM module missing or something else.

 

[xaze]

Nothing in /var/log/messages says anything that seems suspect


The only thing related root is lines like this:

May 21 03:30:01 server1 crond(pam_unix)[28153]: session closed for user root

And then this

May 21 03:33:07 server1 pure-ftpd: ([email protected]) [INFO] New connection from 127.0.0.1
May 21 03:33:07 server1 pure-ftpd: ([email protected]) [INFO] Logout.
May 21 03:33:10 server1 crond(pam_unix)[28386]: session closed for user parahost

 

[24x7team]

Perhaps you need a one time admin now to check...else post a ticket to cpanel support, see if they can help you ...