The service “cpsrvd” appears to be down. When CSF enable.

[Lor]

I started get the email:

Notification​	The service “cpsrvd” appears to be down.​
Service Check Method​	The system failed to connect to this service’s TCP/IP port.​
Reason​	cpsrvd: [HTTP/1.0 200 OK != HTTP/1.x 200 OK] [received_key= [LEFT] JavaScript is disabled in your browser. For WHM to function properly, you must enable JavaScript. If you do not enable JavaScript, certain features in WHM will not function correctly. You have logged out. The system has detected that you are using Internet Explorer 11. cPanel & WHM no longer supports Internet Explorer 11. For more information, read the Continue Username Password Log in Select a locale: English Copyright© 2021 cPanel, L.L.C. ] [expected_key=... removed by topicstater ...][/LEFT]

Displaying the last 30 lines of /var/log/chkservd.log... :


Displaying the last 30 lines of /var/log/chkservd.log...

[2021-01-26 16:21:19 -0700] Service check ....
queueprocd [[check command:+][socket connect:N/A]]...
sshd [[check command:+][socket connect:N/A]]...
spamd [[check command:+][socket connect:N/A]]...
rsyslogd [[check command:+][socket connect:N/A]]...
pop [[check command:+][socket connect:+]]...
p0f [[check command:N/A][socket connect:N/A]]...
nscd [[check command:+][socket connect:N/A]]...
named [[check command:+][socket connect:N/A]]...
mysql [[check command:+][socket connect:N/A]]...
mailman [[check command:+][socket connect:N/A]]...
lmtp [[check command:+][socket connect:+]]...
lfd [[check command:+][socket connect:N/A]]...
ipaliases [[check command:+][socket connect:N/A]]...
imap [[socket_service_auth:1][check command:+][socket connect:+]]...
httpd [[check command:N/A][socket connect:+]]...
ftpd [[socket_service_auth:1][check command:+][socket connect:+]]...
exim [[check command:+][socket connect:+]]...
dnsadmin [[http_service_auth:1][check command:+][socket connect:+]]...
crond [[check command:+][socket connect:N/A]]...
cpsrvd [[http_service_auth:1]cpsrvd: [HTTP/1.0 200 OK != HTTP/1.x 200 OK] [received_key=



Username



Password




Log in



Copyright© 2021 cPanel, L.L.C.
[URL='https://go.cpanel.net/privacy']Privacy Policy[/URL]
] [expected_key=... removed by topicstater ...]
[check command:N/A][socket connect:-][socket failure threshold:3/3][fail count:1]Restarting cpsrvd....
[notify:failed service:cpsrvd]]...
cphulkd [[check command:+][socket connect:+]]...
cpgreylistd [[check command:+][socket connect:N/A]]...
cpdavd [[check command:+][socket connect:N/A]]...
cpanellogd [[check command:+][socket connect:N/A]]...
cpanel_php_fpm [[check command:N/A][socket connect:N/A]]...
apache_php_fpm [[check command:N/A][socket connect:N/A]]...Done
Service Check Finished
----------------------------------------------------

Also Apache status link doesn't work:

Apache server status for server.xxxxxx.com

Failed to receive status information from Apache.

-----------------------------------------------------

Please help.

 

[cPRex]

Hey there! I'm sorry to hear about the cPanel restart issues. Do you see anything interesting in the cPanel log file at /usr/local/cpanel/logs/error_log? That is the first place I would check to find more details about this issue.

For the Apache status issue, are you seeing that problem in WHM >> Apache Status? If so, what does "apachectl status" on the command line show?

 

[heinickenb]

@Lor I do have the issue.
I've tested all TCP ports that cpsrvd is currently listening, also I'

Steps to reproduce these tests:
1) netstat -nlp | grep cpsrvd

tcp 0 0 0.0.0.0:2087 0.0.0.0:* LISTEN 4016/cpsrvd (SSL) -
tcp 0 0 0.0.0.0:2095 0.0.0.0:* LISTEN 4016/cpsrvd (SSL) -
tcp 0 0 0.0.0.0:2096 0.0.0.0:* LISTEN 4016/cpsrvd (SSL) -
tcp 0 0 0.0.0.0:2082 0.0.0.0:* LISTEN 4016/cpsrvd (SSL) -
tcp 0 0 0.0.0.0:2083 0.0.0.0:* LISTEN 4016/cpsrvd (SSL) -
tcp 0 0 0.0.0.0:2086 0.0.0.0:* LISTEN 4016/cpsrvd (SSL) -
unix 2 [ ACC ] STREAM LISTENING 397830 4016/cpsrvd (SSL) - /usr/local/cpanel/var/cpwrapd.sock
unix 2 [ ACC ] STREAM LISTENING 397831 4016/cpsrvd (SSL) - /usr/local/cpanel/var/cpauthd.sock
unix 2 [ ACC ] STREAM LISTENING 397832 4016/cpsrvd (SSL) - /usr/local/cpanel/var/cpdoveauthd.sock
unix 2 [ ACC ] STREAM LISTENING 397833 4016/cpsrvd (SSL) - /usr/local/cpanel/var/cpdoveauth_domainownerd.sock

2) nc -vz 127.0.0.1 2086

Ncat: Version 7.50 ( Ncat - Netcat for the 21st Century )
Ncat: Connected to 127.0.0.1:2086.
Ncat: 0 bytes sent, 0 bytes received in 0.02 seconds.

3) /scripts/restartsrv_cpsrvd --status

cpanel (cpsrvd (SSL) - waiting for connections ) is running as root with PID 15407 (systemd+/proc check method).

4) systemctl status cpanel.service -l

Loaded: loaded (/etc/systemd/system/cpanel.service; enabled; vendor preset: disabled)
Active: active (running) since Qua 2021-02-03 08:19:31 -03; 9min ago
Process: 15373 ExecStop=/usr/local/cpanel/scripts/restartsrv_cpsrvd --no-verbose --stop --notconfigured-ok --systemd-service=cpanel (code=exited, status=0/SUCCESS)
Process: 15381 ExecStart=/usr/local/cpanel/scripts/restartsrv_cpsrvd --no-verbose --notconfigured-ok --systemd-service=cpanel (code=exited, status=0/SUCCESS)
Main PID: 15407 (cpsrvd (SSL) - )
Tasks: 2
Memory: 129.9M
CGroup: /system.slice/cpanel.service
├─15407 cpsrvd (SSL) - waiting for connections
└─24574 webmaild - serving XXX.XXX.XXX.XXX

Fev 03 08:19:30 XXX.XXX.XXX.XXX systemd[1]: Starting cPanel services...
Fev 03 08:19:30 XXX.XXX.XXX.XXX restartsrv_cpsrvd[15381]: License is valid and has already updated recently.
Fev 03 08:19:31 XXX.XXX.XXX.XXX systemd[1]: Can't open PID file /var/run/cpsrvd.pid (yet?) after start: No such file or directory
Fev 03 08:19:31 XXX.XXX.XXX.XXX restartsrv_cpsrvd[15381]: Starting PID 15407: /usr/local/cpanel/libexec/cpsrvd-dormant
Fev 03 08:19:31 XXX.XXX.XXX.XXX systemd[1]: Started cPanel services.

I could'n find out how to solve this issue yet, but if I do I'll post here!

 

[cPRex]

@heinickenb - are you saying that cPanel is also reporting as down on your side as well? If you run "/scripts/upcp --force" does that correct the issue?

 

[heinickenb]

@heinickenb - are you saying that cPanel is also reporting as down on your side as well? If you run "/scripts/upcp --force" does that correct the issue?

Unfortunately it doesn't !!!
By the way our server is running CENTOS 7.9 and WHM & Cpanel @ v92.0.9



Still receiving those alerts:

 

[cPRex]

Thanks for that screenshot. The monitoring tools just think cPanel isn't functioning correctly, which is must be as you're logged into WHM.

If this only happens with CSF enabled it seems like there is some odd behavior with the firewall. Can you make sure all the necessary ports are opened for traffic in CSF that are outlined in our guide here?

How to Configure Your Firewall for cPanel & WHM Services | cPanel & WHM Documentation

This document lists the ports that cPanel & WHM uses, and which services use each of these ports, to allow you to better configure your firewall.

docs.cpanel.net

It seems like the firewall settings are restricting the service monitoring from happening properly.

 

[heinickenb]

Thanks for that screenshot. The monitoring tools just think cPanel isn't functioning correctly, which is must be as you're logged into WHM.

If this only happens with CSF enabled it seems like there is some odd behavior with the firewall. Can you make sure all the necessary ports are opened for traffic in CSF that are outlined in our guide here?

How to Configure Your Firewall for cPanel & WHM Services | cPanel & WHM Documentation

This document lists the ports that cPanel & WHM uses, and which services use each of these ports, to allow you to better configure your firewall.

docs.cpanel.net

It seems like the firewall settings are restricting the service monitoring from happening properly.

@cPRex thank you for the guide.

I have checked all ports and params at CSF.
The issue persists.

By the way, this problem started about a week ago but the server is running since july of 2020.

I am not a 100% sure but I think this issue started after the last update.

Any ideas?

Thanks a lot for your time!!!

 

[cPRex]

CSF isn't part of cPanel as we don't maintain or distribute that software, so I can't say for sure if an update we performed would have had a negative interaction with that. If things work with CSF disabled it might be best to reach out to their support at ConfigServer Technical Support to see if they are aware of any issues with that tool recently.

 

[Lor]

By the way, this problem started about a week ago

On my server the problem disappeared about 2 days ago. Looks like after last update. I did nothing.

But WHM Apache status still not working:

Apache server status for server.xxxxxxx.com
Failed to receive status information from Apache.

 

[cPRex]

Would that server happen to be running Litespeed? If so, it wouldn't be able to pull the Apache status.

Does the status work if you disable the CSF firewall temporarily?

 

[Lor]

I'm sorry. It's still here. But I found when it started. The problem started after I installed OpenVPN access server. I uninstalled it after 3 weeks, but cpsrvd monitoring and Apache status still not working.

Looks like OpenVPN did some changes in firewall config. I checked few times all CSF settings but couldn't find the reason.

Does the status work if you disable the CSF firewall temporarily?

Yes. Apache status and cpsrvd monitoring works fine when CSF disabled.

 

[cPRex]

I run CSF on my personal machine and I haven't come across this error with the Apache status. It would be best to reach out to the CSF team directly at ConfigServer Technical Support to see what their thoughts on this issue would be.