Can not login to CWP user anymore only root works

[Ling]

Recently I can not login to CWP user panel anymore over the side server:2083/login/

Just a blank page appears, no content

Tried rollback to earlier versions, no effect. Checked different browsers, no effect

Disabled modsecurity, firewall, no effect

 

A login over the root panel / list users works without problem, as the login page is circumvented here

Initially this clearly worked in 1170 version with 2FA. Now the whole thing dissapeared, really dont know why this happened.

 

[Sandeep B.]

any screenshot of the error? and what is in the error log when you tried to login, error log is in this directory:

/usr/local/cwp/php71/var/log/

 

[Ling]

[18-Sep-2023 19:26:09] WARNING: [pool cwpsrv] child 184941 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: fast_login in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 120"
[18-Sep-2023 19:31:14] WARNING: [pool cwpsrv] child 190665 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: logout in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 28"
[18-Sep-2023 19:31:14] WARNING: [pool cwpsrv] child 190665 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: login in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 30"
[18-Sep-2023 19:31:14] WARNING: [pool cwpsrv] child 190665 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: fast_login in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 120"
[18-Sep-2023 19:36:28] WARNING: [pool cwpsrv] child 191065 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: logout in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 28"
[18-Sep-2023 19:36:28] WARNING: [pool cwpsrv] child 191065 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: login in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 30"
[18-Sep-2023 19:36:28] WARNING: [pool cwpsrv] child 191065 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: fast_login in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 120"
[18-Sep-2023 19:41:34] WARNING: [pool cwpsrv] child 191496 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: logout in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 28"
[18-Sep-2023 19:41:34] WARNING: [pool cwpsrv] child 191496 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: login in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 30"
[18-Sep-2023 19:41:34] WARNING: [pool cwpsrv] child 191496 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: fast_login in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 120"
[18-Sep-2023 19:46:13] WARNING: [pool login] child 191981 said into stderr: "NOTICE: PHP message: PHP Fatal error:  <br>The encoded file <b>/usr/local/cwpsrv/var/services/users/login/index.php</b> has expired. in Unknown on line 0"
[18-Sep-2023 19:46:39] WARNING: [pool cwpsrv] child 192028 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: logout in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 28"
[18-Sep-2023 19:46:39] WARNING: [pool cwpsrv] child 192028 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: login in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 30"
[18-Sep-2023 19:46:39] WARNING: [pool cwpsrv] child 192028 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: fast_login in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 120"
[18-Sep-2023 19:47:09] WARNING: [pool cwpsrv] child 192086 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: logout in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 28"
[18-Sep-2023 19:47:09] WARNING: [pool cwpsrv] child 192086 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: login in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 30"
[18-Sep-2023 19:47:09] WARNING: [pool cwpsrv] child 192086 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: fast_login in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 120"
[18-Sep-2023 19:47:12] WARNING: [pool cwpsrv] child 192086 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: logout in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 28"
[18-Sep-2023 19:47:12] WARNING: [pool cwpsrv] child 192086 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: login in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 30"
[18-Sep-2023 19:47:12] WARNING: [pool cwpsrv] child 192086 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: fast_login in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 120"
[18-Sep-2023 19:47:14] WARNING: [pool cwpsrv] child 192086 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: logout in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 28"
[18-Sep-2023 19:47:14] WARNING: [pool cwpsrv] child 192086 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: login in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 30"
[18-Sep-2023 19:47:14] WARNING: [pool cwpsrv] child 192086 said into stderr: "NOTICE: PHP message: PHP Notice:  Undefined index: fast_login in /usr/local/cwpsrv/htdocs/admin/login/index.php on line 120"
[18-Sep-2023 19:47:14] WARNING: [pool cwpsrv] child 192086 said into stderr: "cp: cannot stat '/usr/local/cwpsrv/htdocs/adminOLD/lib/phpMyAdmin': No such file or directory"
[18-Sep-2023 19:47:14] WARNING: [pool cwpsrv] child 192086 said into stderr: "cp: cannot stat '/usr/local/cwpsrv/htdocs/adminOLD/lib/roundcube': No such file or directory"
[18-Sep-2023 19:47:15] WARNING: [pool cwpsrv] child 192086 said into stderr: "ln: failed to create symbolic link '/etc/init.d/mysqld': File exists"
[18-Sep-2023 19:47:15] WARNING: [pool cwpsrv] child 192086 said into stderr: "Redirecting to /bin/systemctl status crond.service"
[18-Sep-2023 19:47:15] WARNING: [pool cwpsrv] child 192086 said into stderr: "Redirecting to /bin/systemctl start crond.service"
[18-Sep-2023 19:47:15] WARNING: [pool cwpsrv] child 192086 said into stderr: "  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current"
[18-Sep-2023 19:47:15] WARNING: [pool cwpsrv] child 192086 said into stderr: "                                 Dload  Upload   Total   Spent    Left  Speed"
[18-Sep-2023 19:47:15] WARNING: [pool cwpsrv] child 192086 said into stderr: "
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0"
[18-Sep-2023 19:47:15] WARNING: [pool cwpsrv] child 192086 said into stderr: "
100   112    0    83  100    29    912    318 --:--:-- --:--:-- --:--:--  1230"
[18-Sep-2023 19:47:15] WARNING: [pool cwpsrv] child 192086 said into stderr: "sed: couldn't write 79 items to stdout: Broken pipe"
[18-Sep-2023 19:47:22] WARNING: [pool cwpsrv] child 192404 said into stderr: "sed: couldn't write 79 items to stdout: Broken pipe"
[18-Sep-2023 19:47:27] WARNING: [pool cwpsrv] child 192086 said into stderr: "cat: /usr/local/cwp/.conf/quota_part.conf: No such file or directory"
[18-Sep-2023 19:47:27] WARNING: [pool cwpsrv] child 192208 said into stderr: "sed: couldn't write 75 items to stdout: Broken pipe"
[18-Sep-2023 19:47:37] WARNING: [pool cwpsrv] child 192086 said into stderr: "sed: couldn't write 75 items to stdout: Broken pipe"
[18-Sep-2023 19:47:42] WARNING: [pool cwpsrv] child 192404 said into stderr: "sed: couldn't write 79 items to stdout: Broken pipe"
[18-Sep-2023 19:47:47] WARNING: [pool cwpsrv] child 192086 said into stderr: "sed: couldn't write 79 items to stdout: Broken pipe"

 

The webbrowser sees an error 500

 

[Sandeep B.]

did you've configured disk quota ? please double check and configure it

[Ling]

#
# /etc/fstab
# Created by anaconda on Tue Feb 28 12:59:30 2023
#
# Accessible filesystems, by reference, are maintained under '/dev/disk/'.
# See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info.
#
# After editing this file, run 'systemctl daemon-reload' to update systemd
# units generated from this file.
#
UUID=30cfcfc6-6c1f-4203-975d-120ff2e0552c /                       ext4    usrjquota=quota.user,jqfmt=vfsv0        1       1
UUID=31e0d1f8-5b9a-46d9-b3fb-49b823209c65 /boot                   ext4    usrjquota=quota.user,jqfmt=vfsv0        1       1

 

See, I have installed diskquota now, as it was not there before, but no change.

NB. Only the direct access over port  https://blablabla.com:2083/login/?acc=logon gives an error 500/blank white page

The access over "list accounts" click on the "open panel" wrench symbol (temporary link) works flawlessly and opens the user panel. If I click logout the same blank page opens with error 500.

 

 

 

 

 

 

[Sandeep B.]

did you tried this steps : 

 

[Ling]

No.

I did a complete server roll back to a 2 weeks earlier version which clearly and definitely worked for sure. This was the 1156 version

To my whole surprise, even then I could not log into the userpanel, same as above !!!! How can that be....

Then I did an upgrade back to the 1170 version. Then everything worked again, suddenly. No idea why either.

Now I will reapply the DNSSEC modification I did before. If it stops working, that was the reason. I dont think this was the reason but I will investigate this weird case and keep you posted.

I remember, I had this case long time ago. Unfortunately my brain is getting Alzheimer so I forgot how I solved it. I am really tempted to roll back to the faulty case and try your fix above if it works or not.

What I noticed during the process, is that even I modified the DNSSEC and the websites are using it, the user control panel still is not aware of the modification and searching for the old unsigned files and for sure can not find them. But no errors are produced and the websites work signed according to dig. If there is any connection to the error above, no idea.

In prinicple it is not good that I dont know why it did not work even it works now. Usually those errors will reappear, knock on wood....

Anyway I will keep you posted.

[Ling]

Now I have jumped over my shadow:

I did a rollback to the corrupted version, as I was sure I had found a way out before.

I had applied your patch

CWP-Control Web Panel 500 Internal server Error/Expir

above, but only for the user.

I can confirm, that even it throw a lot of errors, it worked. I can login over the user panel now and also have DNSSEC back as I have installed it before.

So the problem is solved.

The only thing remains: The user panel is still not aware that there is DNSSEC installed on the server, but apparently without consequences.

 

So THANKYOU

 

 

 

[Sandeep B.]

DNSSEC is not planned yet for CWP.

[Ling]

I am aware of this, i just had followed your recommendation  on this board how to install it and it worked. DNS attacks have dissapeared now. So I think DNSSEC would be an important future asset of CWP.

 

What I found out is that the CWP user refers to DNS according to the contents of /home/userblablabla/dnszones

But the system refers to dns according to /etc/named.conf (the zone files) and then /var/named where the zone files are

Apparently the zone files in /home/userblablabla/dnszones are redundant and are completely ignored. Even I delete them nothing happens.

Please clarify if I am wrong in this topic, or maybe I did the installation in a wrong way?

[Sandeep B.]

CWP use named db from /var/named  only

[Ling]

So what's the point of having the menu DNSZONES in /home/userblablabla/dnszones with completely useless entries reflecting nothing. Even the user modifies them, no effect at all.

I would understand if those would be links to /var/named contents but they are just meaningless copies.

Would be better to remove this menu entry rather than creating wrong expectations.

[Sandeep B.]

probably those are migrated from cpanel ?

[Ling]

Yes, thats possible. But the menu key sure was not migrated.

[Sandeep B.]

what is the menu key ?

[jonatitom]

.

Edited October 2, 2023 by jonatitom

[Ling]

On 9/21/2023 at 4:27 PM, Sandeep B. said:

what is the menu key ?

With menu key I mean the possibility to access DNS functions ---> dns zone editor inside the user panel

This appears totally without any effect

Whatever I edit here, even I delete all is ignored by websites and CWP root

So best to remove DNS functions