Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

SOLVED Slow SSH Login

Discussion in 'Security' started by easyprosys, Jul 11, 2018.

  1. easyprosys

    easyprosys Member

    Joined:
    Nov 27, 2015
    Messages:
    24
    Likes Received:
    3
    Trophy Points:
    3
    Location:
    Los Angeles, CA
    cPanel Access Level:
    Root Administrator
    I have just had my first cPanel installation installed after 18 years with Plesk. I have cPanel installed in a Virtuozzo container. It takes 30 seconds for SSH to login. I am using Absolute Telnet (SSH2 mode) that I've used and upgraded for years. The management company cannot answer the question as to why.

    Any thoughts? I'm not going back to the ridiculously unhelpful Plesk products and staff. But I don't have this issue with Plesk that has been installed in another container. Instant login. Just not on the hardened cPanel.

    Thank you in advance. I'm new to cPanel and may ask a stupid question here or there.
     
  2. 24x7server

    24x7server Well-Known Member

    Joined:
    Apr 17, 2013
    Messages:
    1,813
    Likes Received:
    84
    Trophy Points:
    78
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Hi,

    Basically, SSH service is not controlled by the cPanel or the Plesk. If the SSH is slow, it directly relates to your VPS/container network connectivity. This is not a cPanel issue to be precise, nor would it be a Plesk issue if Plesk was installed on it..
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. easyprosys

    easyprosys Member

    Joined:
    Nov 27, 2015
    Messages:
    24
    Likes Received:
    3
    Trophy Points:
    3
    Location:
    Los Angeles, CA
    cPanel Access Level:
    Root Administrator
    Thank you for your reply.

    To be clear the problem is not that SSH is slow once logged in. It is slow to login. 30 seconds. I've tried direct and using my cellphone app over my cellphone provider. Different IP's. No firewall. I'll open a ticket at Virtuozzo. As you noted I wrote that Plesk was not slow at all so I'm not sure if this is a hardening problem. Plesk hardened itself to some extent. The cPanel installation was done by a management company near you.
     
  4. easyprosys

    easyprosys Member

    Joined:
    Nov 27, 2015
    Messages:
    24
    Likes Received:
    3
    Trophy Points:
    3
    Location:
    Los Angeles, CA
    cPanel Access Level:
    Root Administrator
    I need to re-address this question for clarity.

    1. Plesk was installed in a Virtuozzo 7 container. Access via SSH was instant.

    2. We dropped Plesk like a hot potato. No need to explain why.

    3. We reinstalled a new container with absolutely no changes. Same OS. Same memory, same hostname that stayed active in DNS during the switch, same IP's, etc.

    4. Now that cPanel is installed it takes 30 seconds to login.

    I understand that cPanel is not the OS. After 18 years as a host I am fully aware. But the container had "cPanel hardening" applied to it. What in that process could be drastically slowing SSH access?
     
  5. rarod

    rarod Active Member

    Joined:
    Apr 20, 2017
    Messages:
    28
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    Spain
    cPanel Access Level:
    Root Administrator
    Try this: linux-tips.com/t/disabling-reverse-dns-lookups-in-ssh/222
     
  6. easyprosys

    easyprosys Member

    Joined:
    Nov 27, 2015
    Messages:
    24
    Likes Received:
    3
    Trophy Points:
    3
    Location:
    Los Angeles, CA
    cPanel Access Level:
    Root Administrator
    That was already checked but thank you. Please remember that I wrote that when removing Plesk the container was deleted and recreated. This means that unless the management company changed UseDNS to no since the OS was installed fresh before cPanel was installed with in it, it would not be the culprit. The OS installs the same each time and doesn't know that it is getting Plesk, cPanel, DirectAdmin or nothing at all.

    This is not the only container on the hardware node. ALL OTHERS with Plesk respond instantly. So this begs the question of what is different? If not cPanel what hardening technique besides UseDNS being turned to yes and resolving hostnames could be the cuplprit. A virtuozzo container installs the OS just like a stand-alone server.

    The linked to article (that I'd already read) it suggests adding the client side hostname to /etc/hosts. I'm using Windows on a shared static IP and I'm not aware that my laptop has a hostname like a linux server does, so add what to /etc/hosts?
     
  7. cPanelLauren

    cPanelLauren Forums Analyst
    Staff Member

    Joined:
    Nov 14, 2017
    Messages:
    1,835
    Likes Received:
    134
    Trophy Points:
    118
    Location:
    Houston
    cPanel Access Level:
    DataCenter Provider
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. garconcn

    garconcn Well-Known Member

    Joined:
    Oct 29, 2009
    Messages:
    132
    Likes Received:
    6
    Trophy Points:
    68
    I've seen this issue quite frequent on CentOS/Cloudlinux 7 servers but not on version 6.

    First, check systemd-logind status

    # systemctl status systemd-logind

    If you see error like below, restart the systemd-logind service will fix the issue:

    systemd-logind[13432]: Failed to abandon session scope: Transport endpoint is not connected

    Restart it

    # systemctl restart systemd-logind
     
  9. easyprosys

    easyprosys Member

    Joined:
    Nov 27, 2015
    Messages:
    24
    Likes Received:
    3
    Trophy Points:
    3
    Location:
    Los Angeles, CA
    cPanel Access Level:
    Root Administrator
    I did NOT find that error but "Failed to abandon session scope: Transport endpoint is not connected" WAS I restarted anyway it and it worked! THANK YOU! EXCELLENT! Let's hope it doesn't recur. If it does I'll have the fix. Do you know if this is in the cPanel KB? I didn't find it and maybe should add it (suggest.)
     
    #9 easyprosys, Jul 12, 2018
    Last edited: Jul 12, 2018
  10. easyprosys

    easyprosys Member

    Joined:
    Nov 27, 2015
    Messages:
    24
    Likes Received:
    3
    Trophy Points:
    3
    Location:
    Los Angeles, CA
    cPanel Access Level:
    Root Administrator
    THIS IS SOLVED.
     
    #10 easyprosys, Jul 12, 2018
    Last edited: Jul 12, 2018
  11. garconcn

    garconcn Well-Known Member

    Joined:
    Oct 29, 2009
    Messages:
    132
    Likes Received:
    6
    Trophy Points:
    68
    Do you mean this error code "systemd-logind[13432]"?
    I think it's process ID, it should be different from yours, and every time you restart the service, it will change.

    I found this issue happen like once a month or two months. I don't know why it happened and how to fix it permanently.
     
  12. easyprosys

    easyprosys Member

    Joined:
    Nov 27, 2015
    Messages:
    24
    Likes Received:
    3
    Trophy Points:
    3
    Location:
    Los Angeles, CA
    cPanel Access Level:
    Root Administrator
    The error code was not there at all. But the phrase "Failed to abandon session scope: Transport endpoint is not connected" was. I restarted it and it worked. I've since read that this is a known condition with Debian, Ubuntu and now we see CentOS 7.

    https://www.linuxquestions.org/questions/debian-26/systemd-logind-slow-logins-4175543760/

    https://ubuntuforums.org/showthread.php?t=2327694

    Thank you ALL for your help. Not a cPanel problem but for some reason did not occur when another CP was installed. We'll see if I need to add this to rc.local.
     
    cPanelLauren likes this.
  13. cPanelLauren

    cPanelLauren Forums Analyst
    Staff Member

    Joined:
    Nov 14, 2017
    Messages:
    1,835
    Likes Received:
    134
    Trophy Points:
    118
    Location:
    Houston
    cPanel Access Level:
    DataCenter Provider
    Hi @easyprosys

    I'm really happy to hear that you were able to resolve the issue! Thank you for letting us know as well! I don't believe this is in a cPanel related kb mostly because it's specific to CentOS7.

    It seems to be a bit random in regard to which servers experience an issue personally I haven't had any of my test servers experience it though you are the second person I've talked to who has.

    I'm going to go ahead and mark this as resolved at this time but I want to tell you we're happy you chose cPanel and please don't hesitate to ask if you have any other questions!

    Thanks!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #13 cPanelLauren, Jul 13, 2018 at 7:48 AM
    Last edited: Jul 13, 2018 at 9:10 AM
  14. easyprosys

    easyprosys Member

    Joined:
    Nov 27, 2015
    Messages:
    24
    Likes Received:
    3
    Trophy Points:
    3
    Location:
    Los Angeles, CA
    cPanel Access Level:
    Root Administrator
    Actually, it isn't just CentOS 6 or 7. It is also at least Debian and Ubuntu. I posted the links above. There may be others. As I understand it a yum update is done after installing cPanel. The container exhibited no issue until after installing cPanel and that somewhat suggests that something with the installation and/or hardening of the server are the culprit. Since Plesk Onyx had been installed and a yum update done and no problem occurred it makes one wonder. I am not implying anything but rather passing on details that may help someone else in the future.

    Regardless of which is at fault I'd recommend that this issue be added to the KB since several OS distributions cause the issue to occur.
     
  15. cPanelLauren

    cPanelLauren Forums Analyst
    Staff Member

    Joined:
    Nov 14, 2017
    Messages:
    1,835
    Likes Received:
    134
    Trophy Points:
    118
    Location:
    Houston
    cPanel Access Level:
    DataCenter Provider
    HI @easyprosys

    You're correct but the issue being present on Debian and Ubuntu is not relevant to cPanel since we only support CentOS 6 & 7.

    A yum update is done, this is correct but no matter what you do, a yum update wouldn't be something which would only run upon installing cPanel.

    I have several test servers none of which have experienced the issue, just because you didn't experience it when using another panel does not make it something specific to cPanel. I understand your concern though and this post will remain to help others who may be experiencing the issue.

    Thanks!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  16. easyprosys

    easyprosys Member

    Joined:
    Nov 27, 2015
    Messages:
    24
    Likes Received:
    3
    Trophy Points:
    3
    Location:
    Los Angeles, CA
    cPanel Access Level:
    Root Administrator
    Thank you for teaching me something about cPanel. I didn't know that it only ran on CentOS! I agree that the issue is likely OS related but only say that it did not occur until after cPanel was installed. It is a Virtuozzo 7.4 installation that allowed access without a delay. Maybe it has something to do with the hardening. We'll see what happens when I install the second cP in a new container.

    Thanks again.
     
    cPanelLauren likes this.
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice