DirectAdmin only listening on IPv6

[RogierMaas]

Hi all,

I have had DA running for many years. Last week it stopped responding all of a sudden. Nu updates were done, I haven't even logged into the server (CentOS 7). As it seems, DA is only listening on port 2222 on IPv6.

I have added bind_address=0.0.0.0 to directadmin.conf, which only results in my IPv4 address showing up in netstat as... an IPv6 address. Also added disable_ip_check=1 but that doesn't seem to make any difference.
I've tried the usual things. No firewall rules prevent me from connecting, port 2222 isn't blocked at all. Time/date are synchronized.. I can see traffic coming in from my home IP, but since nobody is listening on that port, no answers are going out. It seems DA just won't bind to port 2222 on IPv4.

 

[zEitEr]

Hello,

Do the other services bind to IPv4 fine?

 

[RogierMaas]

Hello,

Do the other services bind to IPv4 fine?

Yes, everything works fine. Webserver, mail, bind, mysql, ssh.. Everything works, just not DA. My server does have an IPv6 address but we're not using it just yet.

Another thing I have found is that my proxy server (next to my IP can connect to port 2222 I also have panel.domain.com that proxies to port 2222) gives the following error:

Proxy Error​

The proxy server could not handle the request
Reason: Error during SSL Handshake with remote server

Perhaps this is related..

 

[zEitEr]

Probably this command will give you a hint:

cat /var/log/directadmin/error.log

 

[RogierMaas]

Not at all. All entries are from feb 23rd while it is now feb 24th. Here is the contents of error.log:

2024:02:23-15:44:43: unable to stat ./data/users/admin/ticket.conf.temp for filesize after write: euid:991
2024:02:23-15:49:00: sys::remove_tracked_temporary_files: removed temporary file '/usr/local/directadmin/data/users/admin/domains/bibodesign.nl.ssl.lock'
2024:02:23-15:51:36: sys::remove_tracked_temporary_files: removed temporary file '/usr/local/directadmin/data/users/admin/domains/bibodesign.nl.ssl.lock'
2024:02:23-15:52:11: Table::tblcomp((null), (null))
2024:02:23-15:52:11: Table::tblcomp((null), (null))
2024:02:23-15:52:11: Table::tblcomp((null), (null))
2024:02:23-15:52:11: Table::tblcomp((null), (null))
2024:02:23-15:52:11: Table::tblcomp((null), (null))
2024:02:23-15:52:11: Table::tblcomp((null), (null))
2024:02:23-15:52:11: Table::tblcomp((null), (null))
2024:02:23-15:52:11: Table::tblcomp((null), (null))
2024:02:23-15:52:58: Couldn't find Private-Key in result for check check
2024:02:23-15:53:01: Couldn't find Private-Key in result for check check
2024:02:23-15:54:08: sys::remove_tracked_temporary_files: removed temporary file '/usr/local/directadmin/data/users/admin/domains/bibodesign.nl.ssl.lock'
2024:02:23-15:54:08: Couldn't find Private-Key in result for check check
2024:02:23-16:21:41: ConfigFile::writeFile: Unable to move ./data/users/admin/ticket.conf.temp to ./data/users/admin/ticket.conf : No such file or directory (errno=2)
2024:02:23-16:22:09: sys::remove_tracked_temporary_files: removed temporary file '/usr/local/directadmin/data/users/admin/domains/bibodesign.nl.ssl.lock'

So this was yesterday. I killed 'directadmin' (-9) and systemctl start directadmin. It again only binds to tcp6 port 2222.
Somehow I'm suspecting this has something to do with an incorrect SSL cert. But when I could still login I let LetsEncrypt generate new certs for this domain.

Is there some script that checks te installation and repairs it?

 

[ericosman]

Hey Rogier,

Take a look at this :

Troubleshooting DA service | Directadmin Docs

DirectAdmin Knowledge Base

docs.directadmin.com

especially:

Troubleshooting DA service | Directadmin Docs

DirectAdmin Knowledge Base

docs.directadmin.com

 

[RogierMaas]

Well, nothing helps. I can get to the login page using http instead of https, but logging in returns me to the login page. Nothing is being logged in any logfile. Strangely enough, directadmin still doesn't seem to have bound to tcp4 but I can access the login page.

What if I reinstall DA? Would that erase the configs on my very crowded server? I have dozens of clients with even more domains..

 

[ericosman]

Well, if i was you i would not "just reinstall" . Because you have the risk to lose your clients data.
But if i telnet your server i see port 2222 is closed (or not reacting).

Are you sure it's not blocked by your firewall?

 

[RogierMaas]

SOLVED using this: https://forum.directadmin.com/threa...ith-2222-no-ssl-err_ssl_protocol_error.66325/

Not a firewall issue. I have my two addresses whitelisted and I can get to the login screen, I just cannot login. But: it's solved using the pointers in the link I posted above. ;-)