user delete blank page

HaRuN

Verified User
Joined
Oct 6, 2008
Messages
13
hello,
I using fedora 8, and DirectAdmin version 1.36
when I delete user or reseller I have got blank page,
CMD_SELECT_USERS?select0=user&confirmed=Confirm&delete=yes
when I suspend a domain I have got blank page after repeat suspend
when unsuspend a domain error
Unable to read domain.com.conf file
Unable to read domain.com.conf file
I think so thats ownership problems
I used
/usr/local/directadmin/scripts/set_permissions.sh
not resolved

my all account so, I can delete with ssh only but I have got too much error
can you help me pls, how can I solve thats problems.
 
Last edited:
Hello,

What are the permissions on the files in question?
Code:
cd /usr/local/directadmin/data/users/[b]username[/b]
ls -la
ls -la domains
We're mainly looking at:
/usr/local/directadmin/data/users/username/domains/domain.com.conf, as that's what's referenced in the error.

Also check /var/log/messages to ensure the drive isn't starting to fail, which would explain the domain.com.conf files suddenly breaking.

You can also run DA in debug mode to see if it produces more information:
http://help.directadmin.com/item.php?id=293

John
 
I will add new user now and I will copy paste error logs here, thnx for help
 
User testuser created
Details
Unix User created successfully
User's System Quotas set
User's data directory created successfully
Domains directory created successfully
Domains directory created successfully in user's home
Domain Created Successfully
User added to ssh config file.

I added new user problem no evrything ok,
now I m doing suspend
http://shellciyiz.biz:2222/CMD_SELE...ser&dosuspend=Suspend&location=CMD_USER_SHOW?
I have got blank page

testuser permissions
-rw------- 1 diradmin diradmin 0 Ağu 23 12:45 testuser/crontab.conf
-rw------- 1 diradmin diradmin 13 Ağu 23 12:45 testuser/domains.list
-rw-r--r-- 1 root ftp 0 Ağu 23 12:45 testuser/ftp.passwd
-rw-r----- 1 diradmin testuser 2020 Ağu 23 12:47 testuser/httpd.conf
-rw------- 1 diradmin diradmin 38 Ağu 23 12:45 testuser/ticket.conf
-rw------- 1 diradmin diradmin 0 Ağu 23 12:45 testuser/tickets.list
-rw------- 1 diradmin diradmin 561 Ağu 23 12:47 testuser/user.conf
-rw------- 1 diradmin diradmin 14 Ağu 23 12:45 testuser/user_ip.list
-rw------- 1 diradmin diradmin 116 Ağu 23 12:45 testuser/user.usage

drwx--x--x 2 diradmin diradmin 4096 Ağu 23 12:47 .
drwx--x--x 3 diradmin diradmin 4096 Ağu 23 12:47 ..
-rw------- 1 diradmin diradmin 301 Ağu 23 12:47 testuser.com.conf
-rw------- 1 diradmin diradmin 329 Ağu 23 12:45 testuser.com.ftp
-rw------- 1 diradmin diradmin 14 Ağu 23 12:45 testuser.com.ip_list
-rw------- 1 diradmin diradmin 0 Ağu 23 12:45 testuser.com.subdomains
-rw------- 1 diradmin diradmin 24 Ağu 23 12:45 testuser.com.usage

directadmin logs no for testuser, bec when I deleting user my sshd closing.
 
Last edited:
Hello,

Update for this issue.

For suspensions and deletions, DA runs the command:
Code:
ps -U [b]username[/b]
to get the list of processes running as that User. It then kills those processes.

The bug in this case is that the ps command was returning more processes than it was supposed to be (but in older version of ps)

The solution is to get the latest version of psproc and install a new /bin/ps binary so that it doesn't returning PIDs it shouldn't be.

John
 
yes I have got problem with ps command

[root@Server bin]# ps -U gercekdost
PID TTY TIME CMD
28146 pts/4 00:00:00 bash
31186 pts/4 00:00:00 ps

[root@Server bin]# ps.new -U gercekdost
PID TTY TIME CMD
1134 ? 00:22:33 sc_serv
1487 ? 00:00:45 eggdrop
1538 ? 00:00:44 eggdrop
16176 ? 00:03:13 eggdrop
16298 ? 00:54:14 eggdrop
16464 ? 00:04:36 eggdrop
17452 ? 00:06:33 eggdrop
18353 ? 00:04:01 eggdrop
21390 ? 00:01:06 eggdrop
30018 ? 00:01:01 ircd
30049 ? 00:00:23 services
30850 ? 00:00:00 bash
[root@Server bin]#

I m root but not move ps.new to ps
[root@Server bin]# mv ps.new ps
mv: try to overwrite `ps', overriding mode 0755 (rwxr-xr-x)? y
mv: `ps.new' `ps'' not moved: access denied
 
Last edited:
Looks like your server got rooted unless those irc programs are ones you installed.

You should format and reinstall.
 
no irc user gercekdost
"ps.new -U gercekdost"

problem not about irc
problem is about with /bin/ps command
:)
 
No its not... it means your server was hacked. They replaced binary files so they can hide processes. Just because you replace the ps command doesnt mean your server still isnt infected.

Type:

lsattr /bin/ps
 
[root@Server bin]# lsattr /bin/ps
-u--ia-------- /bin/ps
[root@Server bin]# mv ps.new ps
mv: try to overwrite `ps', overriding mode 0755 (rwxr-xr-x)? y
mv: `ps.new' `ps''e not moved: access denied

How can delete /bin/ps
do you know ?
 
you great :D

[root@Server ~]# mv /bin/ps.new /bin/ps
mv: `/bin/ps''ın üzerine yazılsın mı?y
[root@Server ~]# /bin/ps -U gercekdost
PID TTY TIME CMD
1134 ? 00:23:01 sc_serv
1487 ? 00:00:46 eggdrop
1538 ? 00:00:45 eggdrop
16176 ? 00:03:13 eggdrop
16298 ? 00:54:15 eggdrop
16464 ? 00:04:37 eggdrop
17452 ? 00:06:34 eggdrop
18353 ? 00:04:03 eggdrop
21390 ? 00:01:06 eggdrop
30018 ? 00:01:19 ircd
30049 ? 00:00:31 services
30850 ? 00:00:00 bash

thank you very much for help
 
Back
Top