Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

cpaneleximfilter is empty or non-existent

Discussion in 'General Discussion' started by sehh, Nov 30, 2011.

  1. sehh

    sehh Well-Known Member

    Joined:
    Feb 11, 2006
    Messages:
    579
    Likes Received:
    5
    Trophy Points:
    168
    Location:
    Europe
    My cpanel error log (/usr/local/cpanel/logs/error_log) is full of the following errors:

    Code:
     warn [whostmgr2] User file '/var/cpanel/users/webadmin' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
 warn [whostmgr2] User file '/var/cpanel/users/mailman' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
 warn [whostmgr2] User file '/var/cpanel/users/clamav' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
 warn [whostmgr2] User file '/var/cpanel/users/cpanel-horde' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
 warn [whostmgr2] User file '/var/cpanel/users/cpanel-phpmyadmin' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
 warn [whostmgr2] User file '/var/cpanel/users/cpanel-phppgadmin' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
 warn [whostmgr2] User file '/var/cpanel/users/cpanelhorde' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
 warn [whostmgr2] User file '/var/cpanel/users/cpanelphpmyadmin' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
 warn [whostmgr2] User file '/var/cpanel/users/cpanelphppgadmin' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
 warn [whostmgr2] User file '/var/cpanel/users/cpanelroundcube' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
 warn [whostmgr2] User file '/var/cpanel/users/cpaneleximfilter' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 106
    Is this something serious? what is this file all about?

    Any help would be appreciated.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #1 sehh, Nov 30, 2011
    Last edited: Nov 30, 2011
  2. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,608
    Likes Received:
    32
    Trophy Points:
    238
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    I'm uncertain what would be calling /var/cpanel/users files for these various services, since they would not have cPanel account files at /var/cpanel/users

    What are you specifically doing in WHM when this error presents itself?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #2 cPanelTristan, Dec 1, 2011
  3. sehh

    sehh Well-Known Member

    Joined:
    Feb 11, 2006
    Messages:
    579
    Likes Received:
    5
    Trophy Points:
    168
    Location:
    Europe
    I have no idea, I just found them in the error log file while I was looking for something else.

    Here is a more complete log:

    Code:
    warn [whostmgr2] User file '/var/cpanel/users/cpaneleximfilter' is empty or non-existent. at /usr/local/cpanel/Cpanel/Config/LoadCpUserFil
e.pm line 106
        Cpanel::Config::LoadCpUserFile::_load('cpaneleximfilter', undef, 0) called at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 25
        Cpanel::Config::LoadCpUserFile::load('cpaneleximfilter') called at /usr/local/cpanel/Cpanel/Config/LoadCpUserFile.pm line 259
        Cpanel::Config::LoadCpUserFile::loadcpuserfile('cpaneleximfilter') called at whostmgr/bin/whostmgr2 line 6965
        main::listbwdescp() called at whostmgr/bin/whostmgr2 line 877
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #3 sehh, Dec 1, 2011
  4. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,608
    Likes Received:
    32
    Trophy Points:
    238
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    cpaneleximfilter is a file on the system normally at /etc location, so it shouldn't be showing anything about /var/cpanel/users location. The location for that user is /var/cpanel/userhomes/cpaneleximfilter instead.

    What does this show?

    Code:
    grep cpaneleximfilter /etc/passwd
    It should have this as the line:

    Code:
    root@host [/]# grep cpaneleximfilter /etc/passwd
cpaneleximfilter:x:32007:32009::/var/cpanel/userhomes/cpaneleximfilter:/usr/local/cpanel/bin/noshell
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #4 cPanelTristan, Dec 1, 2011
  5. sehh

    sehh Well-Known Member

    Joined:
    Feb 11, 2006
    Messages:
    579
    Likes Received:
    5
    Trophy Points:
    168
    Location:
    Europe
    here is what I get:

    Code:
    # grep cpaneleximfilter /etc/passwd
cpaneleximfilter:x:512:512::/var/cpanel/userhomes/cpaneleximfilter:/usr/local/cpanel/bin/noshell
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #5 sehh, Dec 1, 2011
  6. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,608
    Likes Received:
    32
    Trophy Points:
    238
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    It appears correct. When you go to /var/cpanel/userhomes, do you show this for ownership on that folder?

    Code:
    root@host [/var/cpanel/userhomes]# ls -ld cpaneleximfilter
drwx--x--x 3 cpaneleximfilter cpaneleximfilter 4096 Mar  8  2011 cpaneleximfilter/
    Also, do you have any actual file named /var/cpanel/users/cpaneleximfilter on the system? If you do, you likely shouldn't have that on the system.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #6 cPanelTristan, Dec 1, 2011
  7. sehh

    sehh Well-Known Member

    Joined:
    Feb 11, 2006
    Messages:
    579
    Likes Received:
    5
    Trophy Points:
    168
    Location:
    Europe
    This is what I get:

    Code:
    # ls -ld cpaneleximfilter
drwx--x--x  3 cpaneleximfilter cpaneleximfilter 4096 Jan 11  2011 cpaneleximfilter/
    Could this be a remote access attempt? Maybe someone is trying system/service accounts via the cPanel or WHM login process?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #7 sehh, Dec 1, 2011
  8. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,608
    Likes Received:
    32
    Trophy Points:
    238
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    It is possible that someone is trying to log into non-existing accounts using the WHM or cPanel interface. You could test that idea by trying to log into one of the accounts noted in both locations to see the error message it reports while you tail the error log:

    Code:
    tail -fn0 /usr/local/cpanel/logs/error_log
    You could also add a piped grep for your IP to ensure it is just your IP where you get the results:

    Code:
    tail -fn0 /usr/local/cpanel/logs/error_log | grep IP#
    Please replace IP# with your IP, which you can find using What Is My IP Address - Shows Your IP Address site if you aren't certain of your local machine's IP number.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #8 cPanelTristan, Dec 1, 2011
(You must log in or sign up to post here.)
Loading...
Similar Threads - cpaneleximfilter empty existent
  1. Benjamin D.

    cpHulk failed attempts list is now permanently empty?

    Benjamin D., Sep 28, 2018, in forum: Security
    Replies:
    2
    Views:
    86
    cPanelMichael
    Sep 30, 2018
  2. Gojko

    Excessive resource usage of empty account

    Gojko, Sep 16, 2018, in forum: General Discussion
    Replies:
    1
    Views:
    97
    cPanelLauren
    Sep 17, 2018
  3. kabatak

    Empty weekly folders on destination

    kabatak, Sep 13, 2018, in forum: Data Protection
    Replies:
    9
    Views:
    165
    cPanelLauren
    Oct 8, 2018
  4. abdelhost77

    dcpumon logs are empty

    abdelhost77, Sep 2, 2018, in forum: General Discussion
    Replies:
    8
    Views:
    102
    cPanelLauren
    Sep 7, 2018
  5. BassTeQ

    SOLVED Empty Domain Log file

    BassTeQ, Aug 31, 2018, in forum: General Discussion
    Replies:
    9
    Views:
    187
    BassTeQ
    Sep 3, 2018

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice