SSHD Crashed

[sbrad]

Without any warning, SSHD decided to start acting weird.
I connect, get the MOTD, then it immediately disconnects.
I tried restarting SSHD from within WHM, and get a failure message.

 

[feanor]

From WHManager, try &Update System Software&.... and update backend scripts as well.

Then when its complete try the service restart from WHManager--- otherwise try a hard reboot, and if it doesn't come up normally you'll have to have someone at the NOC do surgery on it unless you have another method of remote access.

 

[sbrad]

No good.
Says everything is up to date.

But...When I try to update server software, I get the following error twice:

warning: /etc/ssh/sshd_config created as /etc/ssh/sshd_config.rpmnew

 

[feanor]

Somebody at the NOC needs to update / reinstall ssh from the source or force the RPM in there......

unless you have telnet open in some secure fashion?


Otherwise, definitely have someone with physical access grab the latest rpm release for your OS...
rpm -Uvh rpm* --force
maybe --nodeps
Problems might occur with those flags but for fastest access to SSH this might be the quickest way.

 

[AlaskanWolf]

try connecting to the machine from another machine (diff ip) before going off the deep end, confirm that the system didnt lock you out

 

[sbrad]

Yeah, I have. No good.
My d00d is supposed to look at it for me today. Otherwise, I guess I'll have to get off my arse and drive 90 miles to Hotlanta.

 

[bdraco]

[quote:160d586ba9][i:160d586ba9]Originally posted by sbrad[/i:160d586ba9]

Yeah, I have. No good.
My d00d is supposed to look at it for me today. Otherwise, I guess I'll have to get off my arse and drive 90 miles to Hotlanta.[/quote:160d586ba9]

What happens when you restart ssh in whm ?

 

[sbrad]

[quote:1c001ccf01]What happens when you restart ssh in whm ?[/quote:1c001ccf01]
sshd: [for != SSH] sshd has failed, please contact the sysadmin.

 

[sbrad]

Not to un-necessarily bump this, but here's something I discovered:
I went to the data center the other night and couldn't fix it. So I enabled root login on the server, and was able to connect via root. I STILL can't connect via my regular username. It logs in, sends the MOTD and then disconnects.

 

[feanor]

While you are in with root, connect with regular shell users, and tail -f /var/log/messages.... this should give you a hint of WTfreaking hell is going on. (tail the messages log with one of your root shells that is)

Or at least some fun data to post back here so we can gallavant around with it and pretend we know what's going on.

 

[sbrad]

Ha!
I feel stupid enough posting that I have root login enabled. I suppose I should post the ip address now.

 

[sbrad]

Well, it appears that it's the shell JUST for that username. I feel so stupid for not having tried another username. Prepare the way of the trampoline, feanor. I must jump.

So anyhow, how do I remove and re-add the shell for that user?

 

[feanor]

To wax the user, the best way is to remove the lines from /etc/passwd, and /etc/shadow, and /etc/group

(just the single lines pertaining to the user in question)
Then /scripts/adduser , is a quick script to get the kid back in line.

(btw I'm going to florida for a few days tomorrow.......... please don't trampoline without me or I will hold you in contempt of .... all aviators)

I WILL BE BACK MIDWEEK SO WE CAN BOUNCEY BOUNCEY
I promise.

:p

 

[sbrad]

Flying or driving?
If you're motoring, swing by and I'll buy lunch.

 

[feanor]

FLYING.
Miami International Airport is involved.
Chance of survival? I hope it is improving.

Yea I'm stoked.
going to arrive @ airport at least 6 hours ahead of time for obvious reasons... as long as they have a tramp I'll be golden.

:p
Peace , I'll be checking email as often as possible.