Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

SOLVED mod_evasive causes error 500 in WHM

Discussion in 'General Discussion' started by itmonitor, Sep 5, 2017.

Tags:
  1. itmonitor

    itmonitor Well-Known Member

    Joined:
    Apr 10, 2014
    Messages:
    71
    Likes Received:
    13
    Trophy Points:
    83
    cPanel Access Level:
    Root Administrator
    Hello,

    not sure this is the right forum.

    When enabling mod_evasive on Centos 7.3 WHM 66.0.18 it will result in an error 500 when accessing the WHM login page through its web address. The login will work fine when accessing the WHM login page through the server IP.

    Any ideas how to solve this?
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,165
    Likes Received:
    1,371
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    Could you verify how you enabled Mod_Evasive? There's an experimental version available for EasyApache referenced under the comments section at:

    Mod_evasive support in easyapache4

    Thank you.
     
  3. itmonitor

    itmonitor Well-Known Member

    Joined:
    Apr 10, 2014
    Messages:
    71
    Likes Received:
    13
    Trophy Points:
    83
    cPanel Access Level:
    Root Administrator
    Hello,

    thank you. I did not enable it through command line, but through EasyApache4 WHM [server] EasyApache | 0 - Image Removed. Please Attach Images - . At first I thought it was due to enabling 2FA. As I was unable to find the reason, the hosting company investigated and found out that

    Code:
    Here is the error I am seeing in a stack trace of Apache when trying to use the cPanel service aliases (/whm, /cpanel):
    
    ========================
    
    2294 20:51:39.558223 writev(2, [{"*** Error in `", 14}, {"/usr/sbin/httpd", 15}, {"': ", 3}, {"double free or corruption (!prev)", 33}, {": 0x", 4}, {"00007fe098bdd940", 16}, {" ***\n", 5}], 7) = 90
     
    #3 itmonitor, Sep 6, 2017
    Last edited by a moderator: Sep 17, 2017 at 12:19 PM
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,165
    Likes Received:
    1,371
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    It looks like we are investigating this further as part of ticket number 8843445. I'll monitor this support ticket and update this thread with the outcome once it's closed.

    Thank you.
     
  5. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,165
    Likes Received:
    1,371
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    To update, it looks like our Technical Support Department was unable to reproduce the issue. The ticket was closed after no additional responses.

    Thank you.
     
  6. itmonitor

    itmonitor Well-Known Member

    Joined:
    Apr 10, 2014
    Messages:
    71
    Likes Received:
    13
    Trophy Points:
    83
    cPanel Access Level:
    Root Administrator
    Hi. I enabled now 2FA into WHM and it will break the WHM page - Removed Please Attach Images - 500 Internal Server Error. Had to disable 2FA to get WHM working again. Yes, I believe there is a bug here that should be investigated. If you want input on my part to solve this, please get back to me.
     
    #6 itmonitor, Sep 17, 2017 at 8:49 AM
    Last edited by a moderator: Sep 17, 2017 at 12:21 PM
  7. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,165
    Likes Received:
    1,371
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Are you able to reply to re-open ticket 8843445? It was closed without a response to last message sent by our Technical Analysts.

    Thank you.
     
  8. itmonitor

    itmonitor Well-Known Member

    Joined:
    Apr 10, 2014
    Messages:
    71
    Likes Received:
    13
    Trophy Points:
    83
    cPanel Access Level:
    Root Administrator
    Thank you. I re-opened the ticket.
     
  9. itmonitor

    itmonitor Well-Known Member

    Joined:
    Apr 10, 2014
    Messages:
    71
    Likes Received:
    13
    Trophy Points:
    83
    cPanel Access Level:
    Root Administrator
    Thank you Michael.

    The CPanel support found out that the issue was caused by a malformed JSON array in the users file for WHM's two factor authentication system, on

    Code:
    # cat /var/cpanel/authn/twofactor_auth/tfa_userdata.json
    ‘{}’
    that was corrected to

    Code:
    # echo '{}' > /var/cpanel/authn/twofactor_auth/tfa_userdata.json
    # cat /var/cpanel/authn/twofactor_auth/tfa_userdata.json
    {}
    Hope this helps others that may have the same issue.

    rgs

    IM
     
    cPanelMichael likes this.
Loading...

Share This Page