Get Email Failed cpsrvd, imap, exim

[taufiqibo]

Hello Everyone..
I got 3 Email.
1. The service “cpsrvd” appears to be down
Service check failed to complete
Unable to connect to port 2086 on 127.0.0.1: Connection refused: Died

2. The service “imap” appears to be down.
TCP Transaction Log:
<< * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
>> A001 LOGIN __cpanel__service__auth__imap__Vl6pYaBcA0NTefb0zlpxcxp4S1UqnHZxGJpVaWTYIW1ZPDu6lm2 6CwonfN9PioSOeSMI6G2I6jrzbYOWH5HmxOdm5Oh5j61eZBo7iQ6juWtjVM
<< A001 NO [UNAVAILABLE] Temporary authentication failure. [cpanel.domain.id:2020-01-23 16:04:07]
imap: ** [A001 NO [UNAVAILABLE] Temporary authentication failure. [cpanel.domain.id:2020-01-23 16:04:07] != A001 OK]
: Died

3. The service “exim” appears to be down.

​

TCP Transaction Log: << 220-cpanel.domain.id ESMTP Exim 4.92 #2 Thu, 23 Jan 2020 12:39:24 +0700 << 220-We do not authorize the use of this system to transport unsolicited, << 220 and/or bulk e-mail. >> EHLO localhost << 250-cpanel.domain.id Hello localhost [127.0.0.1] << 250-SIZE 52428800 << 250-8BITMIME << 250-PIPELINING << 250-AUTH PLAIN LOGIN << 250-STARTTLS << 250 HELP >> AUTH PLAIN AF9fY3BhbmVsX19zZXJ2aWNlX19hdXRoX19leGltX18ycnZ1cTNWa2RVo4alB5YVJGTjhsbUZnUXRGZUZUTnVxOWpqMHN4aUl1aFptNF9NWFpHTThWAEY3RkEwTUZISENUYY0VjUjk5YktkelJVMm1NSGJaUjJpMzF6NVBzQkxZcEV1NklldUJrQXhGTnNtWkE= << 535 Incorrect authentication data exim: ** [535 Incorrect authentication data != 2] : Died​

when i got that email,
my server has become unstable, my website has been down several times, so I have to restart apache and then I can use it again, the worse is that my WHM cpanel is always down, so I restart cpanel every few minutes. I use centos 7, so what should I do? Please help

 

[cPanelLauren]

During that time frame what was noted in /var/log/messages? What is the output of the following:

sar -r

 

[taufiqibo]

During that time frame what was noted in /var/log/messages? What is the output of the following:

sar -r

this is that log

Jan 24 09:58:02 cpanel systemd: Started Session 1889 of user root.
Jan 24 09:58:02 cpanel systemd: Started Session 1888 of user root.
Jan 24 09:58:02 cpanel systemd: Started Session 1890 of user root.
Jan 24 09:58:23 cpanel systemd: Stopping Dovecot Imap Server...
Jan 24 09:58:23 cpanel dovecot_cpshutdown: Opened “/var/run/dovecot/master.pid” …
Jan 24 09:58:23 cpanel dovecot_cpshutdown: Master Dovecot process = 31770
Jan 24 09:58:23 cpanel dovecot_cpshutdown: Executing “/usr/sbin/dovecot stop” …
Jan 24 09:58:24 cpanel dovecot_cpshutdown: Waiting 30 seconds for process 32358 to end …
Jan 24 09:58:24 cpanel dovecot_cpshutdown: Done! Waiting 30 seconds for process 31770 to end …
Jan 24 09:58:24 cpanel dovecot_cpshutdown: Dovecot is now shut down.
Jan 24 09:58:24 cpanel dovecot_cpshutdown: Any remaining Dovecot processes will now be terminated.
Jan 24 09:58:24 cpanel dovecot_cpshutdown: Waiting for dovecot,dovecot-auth,dovecot/pop3-login,dovecot/imap-login,dovecot/anvil,dovecot/log,dovecot/config,dovecot/auth,dovecot-wrap to shutdown ... not running.
Jan 24 09:58:24 cpanel systemd: Stopped Dovecot Imap Server.
Jan 24 09:58:24 cpanel systemd: Started Dovecot Imap Server.
Jan 24 09:58:24 cpanel pure-ftpd: ([email protected]) [INFO] New connection from 127.0.0.1
Jan 24 09:58:24 cpanel pure-ftpd: ([email protected]) [INFO] __cpanel__service__auth__ftpd__MDSyXxSWcgXjcata4r_4n_54t4ALV4kH6LxkjWN5Hd91c65qoG9QvjYdwXtRA3NQ is now logged in
Jan 24 09:58:24 cpanel pure-ftpd: (__cpanel__service__auth__ftpd__MDSyXxSWcgXjcata4r_4n_54t4[email protected]) [INFO] Logout.
Jan 24 09:58:25 cpanel systemd: Cannot add dependency job for unit clamd.service, ignoring: Unit not found.
Jan 24 09:58:25 cpanel systemd: Starting cPanel services...
Jan 24 09:58:25 cpanel systemd: Starting mailman services...
Jan 24 09:58:25 cpanel restartsrv_mailman: (XID p97njx) The “mailman” service is not configured: there are no configured mailing lists
Jan 24 09:58:25 cpanel systemd: Can't open PID file /usr/local/cpanel/3rdparty/mailman/data/master-qrunner.pid (yet?) after start: No such file or directory
Jan 24 09:58:25 cpanel systemd: Failed to start mailman services.
Jan 24 09:58:25 cpanel systemd: Unit mailman.service entered failed state.
Jan 24 09:58:25 cpanel systemd: mailman.service failed.
Jan 24 09:58:25 cpanel restartsrv_cpsrvd: License is valid and has already updated recently.
Jan 24 09:58:25 cpanel systemd: Can't open PID file /var/run/cpsrvd.pid (yet?) after start: No such file or directory
Jan 24 09:58:25 cpanel restartsrv_cpsrvd: Starting PID 32411: /usr/local/cpanel/libexec/cpsrvd-dormant
Jan 24 09:58:25 cpanel systemd: Started cPanel services.
Jan 24 09:58:25 cpanel systemd: Starting FPM service for cPanel Daemons...
Jan 24 09:58:26 cpanel restartsrv_cpanel_php_fpm: (XID ucn3xn) The “cpanel_php_fpm” service is disabled.
Jan 24 09:58:26 cpanel systemd: cpanel_php_fpm.service: control process exited, code=exited status=255
Jan 24 09:58:26 cpanel systemd: Failed to start FPM service for cPanel Daemons.
Jan 24 09:58:26 cpanel systemd: Unit cpanel_php_fpm.service entered failed state.
Jan 24 09:58:26 cpanel systemd: cpanel_php_fpm.service failed.
Jan 24 09:59:01 cpanel systemd: Started Session 1891 of user root.
Jan 24 09:59:01 cpanel systemd: Started Session 1892 of user root.
Jan 24 09:59:01 cpanel systemd: Started Session 1893 of user root.
Jan 24 09:59:01 cpanel systemd: cpanel.service: main process exited, code=killed, status=9/KILL
Jan 24 09:59:01 cpanel restartsrv_cpsrvd: Ignoring systemd request to shutdown service while deactivating that already has received signal KILL at bin/restartsrv_base.pl line 237.
Jan 24 09:59:01 cpanel systemd: Unit cpanel.service entered failed state.
Jan 24 09:59:01 cpanel systemd: cpanel.service failed.

 

[cPanelLauren]

This looks a lot like someone stopped those services, dovecots stop was a clean shutdown, this also isn't the full picture - there would have to be more information listed at prior to 9:58 - anytime a monitored service is stopped the system automatically tries to restart it. What occurred here is that it looks like the request to shut down cpsrvd happened then during the exact same time a request to start cpsrvd was executed which failed.

Since this time has this occurred again? Is cpsrvd able to be restarted normally now?