machine hacked ...

not no, everything happened the 11, but already I solved it, of the way that I commented previously

 

well.. first crash in interactive mode reports

"Error in named configuration: /home/admispconfig/ispconfig/web/mulc/edit " failed: file not found"

this is where my box started complaining before i did any updates .. ( in a server room with 60 servers i had no chance to analyze or do much but take the box with me )... from there it is all downhill. what could this be?

Correction:
"Error in named configuration: /home/admispconfig/ispconfig/web/multidoc/edit " failed: file not found"

 

.. from syslog..
/etc/named.conf:3 ... change directory to /home/admispconfig/ispconfig/web/multidoc/edit " failed: file not found"

/etc/named.conf:3 .. parsing failed...

??

 

Same problem

Hello focks,

I have the same error;

[root@localhost /]# /etc/init.d/named start
Starting named:
Error in named configuration:
/etc/named.conf:3: change directory to '/home/admispconfig/ispconfig/web/multidoc/edit' failed: file not found
/etc/named.conf:3: parsing failed

Did everything here, nothing worked... some solution?

Here are some settings:

Locate named.conf:
/usr/share/man/man5/named.conf.5.gz
/root/ispconfig/isp/conf/named.conf.master
/etc/named.conf
/etc/named.conf~
/etc/vhcs2/bind/named.conf
/etc/vhcs2/bind/working/named.conf
/etc/log.d/conf/services/named.conf
/var/named/chroot/etc/named.conf

Named.conf ISPconfig: /etc/named.conf
Zonefile dir in ISPconfig: /var/named/chroot/var/named

Did already all the 755 chmod settings...

Please help

 

Already did, but i think there is a strange thing... some Loop...

in my /var/named are the following items:
drwxrwxr-x 6 0 25 4096 Jul 24 18:51 chroot
drwxrwx--- 2 25 25 4096 Jul 24 18:51 data
drwxrwx--- 2 25 25 4096 Jul 24 18:51 slaves

if i enter chroot, then i get this:
drwxr-xr-- 2 0 25 4096 Nov 5 10:14 dev
drwxr-x--- 2 0 25 4096 Nov 5 10:14 etc
dr-xr-xr-x 135 0 0 0 Nov 2 23:22 proc
drwxrwxr-x 5 0 25 4096 Nov 5 10:14 var

Ill go to var and then named, there is the following:
lrwxrwxrwx 1 0 0 6 Nov 5 10:15 chroot -> ../../
drwxrwx--- 2 25 25 4096 Aug 25 2004 data
drwxrwx--- 2 25 25 4096 Jul 27 2004 slaves

If i enter chroot, ill start from the beginning...
drwxr-xr-- 2 0 25 4096 Nov 5 10:14 dev
drwxr-x--- 2 0 25 4096 Nov 5 10:14 etc
dr-xr-xr-x 138 0 0 0 Nov 2 23:22 proc
drwxrwxr-x 5 0 25 4096 Nov 5 10:14 var

IS it possible the Bind9 is in a loop when checking the dirs?

 

My path config is "/var/named/chroot/var/named" in ISPconfig.

and still doesn't work...

 

i gave up my case.. there must be a bug .. when did your problems occur? Mine occured right after I changed some email accounts.

 

Is the same path set in /etc/named.conf ?

No, there still stands: directory "/home/admispconfig/ispconfig/web/multidoc/edit";

 

The problem is that the files named.ca en named.local only are in /home/admispconfig/ispconfig/web/multidoc/edit and not in /var/named/chroot/var/named

named.conf:

options {
pid-file "/var/named/chroot/var/run/named/named.pid";
directory "/home/admispconfig/ispconfig/web/multidoc/edit";
auth-nxdomain no;
/*
* If there is a firewall between you and nameservers you want
* to talk to, you might need to uncomment the query-source
* directive below. Previous versions of BIND always asked
* questions using port 53, but BIND 8.1 uses an unprivileged
* port by default.
*/
// query-source address * port 53;
};

//
// a caching only nameserver config
//
zone "." {
type hint;
file "named.ca";
};

zone "0.0.127.in-addr.arpa" {
type master;
file "named.local";
};




//// MAKE MANUAL ENTRIES BELOW THIS LINE! ////

 

Take a look here: http://www.howtoforge.com/forums/sh...highlight=/etc/named.conf:3:+change+directory

 

crashed

exactly same problem.

I just updated some email data. After that, I couldn't login to
my imap accounts. Login by ssh also failed for every user with:

:~# ssh_exchange_identification: Connection closed by remote host

Rebooting the machine failed. The remote-hand-on by data center also...

tomorrow (Sunday) I've to get up early ..
driving to the datacenter in Frankfurt/Main

Version: 2.2.14
worked always fine upto now


could it be that if you perform many changes in near time, the
"systemmanger" (the smart-guy who changes the passwd and
shadow file) gets little bit "confused" by doing his job?

otherwise I cannot explain to myself what there was going wrong.

but the most curious thing is, that all this problems happend coextensive.

hoping my forum members are goint to excuse the offline time


// STATUS UPDATE: sunday 1pm
machine is on the net again. Had to restore passwd, shadows and group
thx for the tutorial "how to knoppix with lvm and raid" - was a real help to me!

if I can help tracing the failure to his roots, I will mail all needed logs to ispconfig mods.
best, give me some commands like: tail -5000 /var/log/auth.log > auth.log.txt
thereby, I can collect all you want

I'm on Debian etch,
/root/ispconfig and /home/adminispconfig are the dirs

what else attracts my attention:
- the file local-host-names lost settings beyond "#### MAKE MANUAL ENTRIES BELOW THIS LINE! ####"
- the shadow file was cropped. It only contents some webxx_* accounts. System account weren't there anymore.

greetings,
melchior

 

thx, I just sent you a cropped logile.

would be nice to get the problem tracked down. I've
to do some mail account settings, and don't want to
drive to the datacenter again

regards,
melchior

 

Today It happened to me also,..

/etc/group
and
/etc/shadow

..got corrupt somehow.

I think the ispconfig system (v2) was doing some changes and did not finish properly.

/etc/group file was empty
/etc/shadow had ":x:" instead of crypted passwords ":h/TZR#HR!j3h)nj:"

I restored these two files from backup but new users that were added after the backup are lost.

What is the best way to get the system in full shape again?

The ISPconfig interface still shows new users of course.

I need a really good advice, as I have 600 users + 10 new.
I would like to save these 600 users from backup and do the new users again.

I made a full backup in ISPconfig interface 14 days ago.

Tnx,

Peter

 

UPDATE:

As it turned out, the problem was solved by replacing the two mentioned files from the backup, then manually running

Code:

/root/ispconfig/php/php /root/ispconfig/scripts/writeconf.php

The system then updated all users in /etc/shadow.