directadmin running as nobody?

C

Crusader

Verified User
Joined
Nov 29, 2006
Messages
70
I just noticed twelve instances of directadmin showing up on top. eleven of them are being run as nobody and one is running as a user that has SSH access.

Is DA supposed to be doing this?

Please note that I've also got DA set to load on the default port as well as another port with SSL enabled. Could that be it?

Thanks in advance!
 
Directadmin is supposed to run as nobody.

Please note that I've also got DA set to load on the default port as well as another port with SSL enabled.
Click to expand...

Unless something has changed recently DA can only run on one port. It cannot listen on multiple ports.
 
I don't quite remember how I did it but I followed a tutorial on this site to get DA to run with on one port without SSL and with SSL on another.

I'm still confused as to why one of my SSH enabled users is running DA.

edit:
nobody 6069 0.0 0.0 8816 576 ? S Sep24 0:00 /usr/local/directadmin/directadmin d
nobody 6070 0.0 0.0 8816 576 ? S Sep24 0:00 /usr/local/directadmin/directadmin d
nobody 7683 0.0 0.0 8816 576 ? S Sep24 0:00 /usr/local/directadmin/directadmin d
bugs 7786 0.0 0.2 10092 2348 ? S Sep19 0:00 /usr/local/directadmin/directadmin d
 
Show us
Code: 
ps aux | grep directadmin
and
Code: 
netstat -npa | grep directadmin
 
Here you go, and thanks for replying :)

root 28336 0.0 0.0 3048 424 ? Ss Jul02 0:22 /usr/local/directadmin/da-popb4smtp
nobody 28415 0.0 0.1 8816 1352 ? Ss Jul02 0:00 /usr/local/directadmin/directadmin d
nobody 28420 0.0 0.1 8928 1836 ? S Jul02 0:01 /usr/local/directadmin/directadmin d
bugs 7786 0.0 0.2 10092 2348 ? S Sep19 0:00 /usr/local/directadmin/directadmin d
nobody 6069 0.0 0.0 8816 576 ? S Sep24 0:00 /usr/local/directadmin/directadmin d
nobody 6070 0.0 0.0 8816 576 ? S Sep24 0:00 /usr/local/directadmin/directadmin d
nobody 7683 0.0 0.0 8816 576 ? S Sep24 0:00 /usr/local/directadmin/directadmin d
nobody 9447 0.0 0.0 8816 576 ? S Sep24 0:00 /usr/local/directadmin/directadmin d
nobody 10145 0.0 0.0 8816 576 ? S Sep24 0:00 /usr/local/directadmin/directadmin d
nobody 11849 0.0 0.0 8928 628 ? S 13:25 0:00 /usr/local/directadmin/directadmin d
nobody 11856 0.0 0.0 8928 628 ? S 13:25 0:00 /usr/local/directadmin/directadmin d
nobody 11879 0.0 0.0 8928 628 ? S 13:25 0:00 /usr/local/directadmin/directadmin d
nobody 11888 0.0 0.0 8928 628 ? S 13:25 0:00 /usr/local/directadmin/directadmin d
root 10048 0.0 0.0 1780 544 pts/0 S+ 14:10 0:00 grep directadmin

tcp 0 0 0.0.0.0:2222 0.0.0.0:* LISTEN 28415/directadmin
tcp 0 0 0.0.0.0:2223 0.0.0.0:* LISTEN 28420/directadmin
 
Code: 
ls -l /proc/7786

After that restart directadmin and see if the bugs user goes away.
 
total 0
-r-------- 1 root root 0 Sep 25 14:38 auxv
-r--r--r-- 1 root root 0 Sep 25 13:53 cmdline
lrwxrwxrwx 1 root root 0 Sep 25 14:38 cwd -> /home/bugs
-r-------- 1 root root 0 Sep 25 14:38 environ
lrwxrwxrwx 1 root root 0 Sep 25 14:38 exe -> /usr/local/directadmin/directadmin
dr-x------ 2 root root 0 Sep 25 14:11 fd
-r--r--r-- 1 root root 0 Sep 25 14:38 maps
-rw------- 1 root root 0 Sep 25 14:38 mem
-r--r--r-- 1 root root 0 Sep 25 14:38 mounts
-r-------- 1 root root 0 Sep 25 14:38 mountstats
-r--r--r-- 1 root root 0 Sep 25 14:38 numa_maps
lrwxrwxrwx 1 root root 0 Sep 25 14:38 root -> /home/bugs
-r-------- 1 root root 0 Sep 25 14:38 smaps
-r--r--r-- 1 root root 0 Sep 25 13:45 stat
-r--r--r-- 1 root root 0 Sep 25 13:45 statm
-r--r--r-- 1 root root 0 Sep 25 12:52 status
dr-xr-xr-x 3 root root 0 Sep 25 14:38 task
-r--r--r-- 1 root root 0 Sep 25 14:38 wchan

Going to try restarting DA now.

edit: Restarted DA through service directadmin restart and it's still there.
 
BTW I stand corrected on the dual port thing,

I am sure somebody here already knows the answer but until then.... What is special about bugs? Something makes that user different.
 
Hm, I don't think there's anything special about the user bugs other than I host one of my sites on it and it has SSH access. It's IP is also shared with everyone elses.

After restarting, I also can't seem to access DA through my SSL port anymore.
 
You must log in or register to reply here.
Back
Top