Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

cpaneleximfilter is empty or non-existent

Discussion in 'General Discussion' started by sehh, Nov 30, 2011.

  1. sehh

    sehh Well-Known Member

    Joined:
    Feb 11, 2006
    Messages:
    579
    Likes Received:
    5
    Trophy Points:
    168
    Location:
    Europe
    My cpanel error log (/usr/local/cpanel/logs/error_log) is full of the following errors:

    Code:
     warn [whostmgr2] User file '/var/cpanel/users/webadmin' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
 warn [whostmgr2] User file '/var/cpanel/users/mailman' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
 warn [whostmgr2] User file '/var/cpanel/users/clamav' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
 warn [whostmgr2] User file '/var/cpanel/users/cpanel-horde' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
 warn [whostmgr2] User file '/var/cpanel/users/cpanel-phpmyadmin' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
 warn [whostmgr2] User file '/var/cpanel/users/cpanel-phppgadmin' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
 warn [whostmgr2] User file '/var/cpanel/users/cpanelhorde' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
 warn [whostmgr2] User file '/var/cpanel/users/cpanelphpmyadmin' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
 warn [whostmgr2] User file '/var/cpanel/users/cpanelphppgadmin' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
 warn [whostmgr2] User file '/var/cpanel/users/cpanelroundcube' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
 warn [whostmgr2] User file '/var/cpanel/users/cpaneleximfilter' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
    Is this something serious? what is this file all about?

    Any help would be appreciated.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #1 sehh, Nov 30, 2011
    Last edited: Nov 30, 2011
  2. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,609
    Likes Received:
    32
    Trophy Points:
    238
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    I'm uncertain what would be calling /var/cpanel/users files for these various services, since they would not have cPanel account files at /var/cpanel/users

    What are you specifically doing in WHM when this error presents itself?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #2 cPanelTristan, Dec 1, 2011
  3. sehh

    sehh Well-Known Member

    Joined:
    Feb 11, 2006
    Messages:
    579
    Likes Received:
    5
    Trophy Points:
    168
    Location:
    Europe
    I have no idea, I just found them in the error log file while I was looking for something else.

    Here is a more complete log:

    Code:
    warn [whostmgr2] User file '/var/cpanel/users/cpaneleximfilter' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFil
e.pm line 106
        Cpanel::Config::LoadCpUserFile::_load('cpaneleximfilter', undef, 0) called at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 25
        Cpanel::Config::LoadCpUserFile::load('cpaneleximfilter') called at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 259
        Cpanel::Config::LoadCpUserFile::loadcpuserfile('cpaneleximfilter') called at whostmgr/bin/whostmgr2 line 6965
        main::listbwdescp() called at whostmgr/bin/whostmgr2 line 877
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #3 sehh, Dec 1, 2011
  4. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,609
    Likes Received:
    32
    Trophy Points:
    238
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    cpaneleximfilter is a file on the system normally at /etc location, so it shouldn't be showing anything about /var/cpanel/users location. The location for that user is /var/cpanel/userhomes/cpaneleximfilter instead.

    What does this show?

    Code:
    grep cpaneleximfilter /etc/passwd
    It should have this as the line:

    Code:
    root@host [/]# grep cpaneleximfilter /etc/passwd
cpaneleximfilter:x:32007:32009::/var/cpanel/userhomes/cpaneleximfilter:/usr/local/cpanel/bin/noshell
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #4 cPanelTristan, Dec 1, 2011
  5. sehh

    sehh Well-Known Member

    Joined:
    Feb 11, 2006
    Messages:
    579
    Likes Received:
    5
    Trophy Points:
    168
    Location:
    Europe
    here is what I get:

    Code:
    # grep cpaneleximfilter /etc/passwd
cpaneleximfilter:x:512:512::/var/cpanel/userhomes/cpaneleximfilter:/usr/local/cpanel/bin/noshell
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #5 sehh, Dec 1, 2011
  6. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,609
    Likes Received:
    32
    Trophy Points:
    238
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    It appears correct. When you go to /var/cpanel/userhomes, do you show this for ownership on that folder?

    Code:
    root@host [/var/cpanel/userhomes]# ls -ld cpaneleximfilter
drwx--x--x 3 cpaneleximfilter cpaneleximfilter 4096 Mar  8  2011 cpaneleximfilter/
    Also, do you have any actual file named /var/cpanel/users/cpaneleximfilter on the system? If you do, you likely shouldn't have that on the system.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #6 cPanelTristan, Dec 1, 2011
  7. sehh

    sehh Well-Known Member

    Joined:
    Feb 11, 2006
    Messages:
    579
    Likes Received:
    5
    Trophy Points:
    168
    Location:
    Europe
    This is what I get:

    Code:
    # ls -ld cpaneleximfilter
drwx--x--x  3 cpaneleximfilter cpaneleximfilter 4096 Jan 11  2011 cpaneleximfilter/
    Could this be a remote access attempt? Maybe someone is trying system/service accounts via the cPanel or WHM login process?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #7 sehh, Dec 1, 2011
  8. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,609
    Likes Received:
    32
    Trophy Points:
    238
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    It is possible that someone is trying to log into non-existing accounts using the WHM or cPanel interface. You could test that idea by trying to log into one of the accounts noted in both locations to see the error message it reports while you tail the error log:

    Code:
    tail -fn0 /usr/local/cpanel/logs/error_log
    You could also add a piped grep for your IP to ensure it is just your IP where you get the results:

    Code:
    tail -fn0 /usr/local/cpanel/logs/error_log | grep IP#
    Please replace IP# with your IP, which you can find using What Is My IP Address - Shows Your IP Address site if you aren't certain of your local machine's IP number.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #8 cPanelTristan, Dec 1, 2011
(You must log in or sign up to post here.)
Loading...
Similar Threads - cpaneleximfilter empty existent
  1. wiredafrican

    Files dropped into empty directories

    wiredafrican, Jun 6, 2018, in forum: Security
    Replies:
    4
    Views:
    65
    wiredafrican
    Jun 8, 2018
  2. Ada Yau

    Sent email successfully but the email body is empty

    Ada Yau, May 28, 2018, in forum: E-mail Discussion
    Replies:
    3
    Views:
    72
    cPanelLauren
    Jun 4, 2018
  3. menathor

    Modsecurity Tools hitlist is empty / not working

    menathor, Apr 30, 2018, in forum: Security
    Replies:
    5
    Views:
    131
    cPanelLauren
    May 30, 2018
  4. PatrickVeenstra

    MultiPHP INI Editor empty "content"

    PatrickVeenstra, Apr 15, 2018, in forum: General Discussion
    Replies:
    3
    Views:
    90
    cPanelMichael
    Apr 17, 2018
  5. Pelle

    Empty pages

    Pelle, Apr 11, 2018, in forum: General Discussion
    Replies:
    1
    Views:
    48
    Infopro
    Apr 11, 2018

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice