Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: daley on March 25, 2007, 12:21:06 PM

Title: smeserver 7.12 - Strange shutdown msg
Post by: daley on March 25, 2007, 12:21:06 PM: Hi,

Anyone see this shutdown message on the console screen?

===
Scaler - EMS Mini Piezon Ultrasonic Scaler

Consists of:
1 x Titanium Chuck Scaling Handpiece
(autoclavable up to 135 deg C)
1 x Torque Wrench (autoclavable)
1 x Scaling Tip A
1 x Scaling Tips B & C
1 x Steri Aluminium Box with Tip Holder
1 x 24V Transformer

Broadcast message from root (console) (Sun Mar 25 16:12:52 2007):

The system is going down for reboot NOW!
===

Regards,
Daley
Title: smeserver 7.12 - Strange shutdown msg
Post by: cactus on March 25, 2007, 01:33:50 PM: Nope, and I don't think it has anything to do with SME Server components as well... It looks like a security breach or something like that. Do you have remote access set up?
Title: smeserver 7.12 - Strange shutdown msg
Post by: bpivk on March 25, 2007, 02:19:13 PM: This has something to do with automobiles.
Type history in ssh and check if there's anything strange reported.
If you find anything strange contact security at contribs dot org.
Title: smeserver 7.12 - Strange shutdown msg
Post by: imcintyre on March 25, 2007, 03:46:37 PM: Actually it is for dentist supplies and the website appears to be from India
Quote
http://www.dentistindia.com/unicorn/ems1.htm

Thats' all the help I can be
Title: smeserver 7.12 - Strange shutdown msg
Post by: william_syd on March 25, 2007, 04:00:40 PM: Quote
We are perfectionists. Doing the job right is what we do best. Perfection is our passion. Electro Medical Systems (EMS) was founded more than 20 years ago in Switzerland's Valle de Joux. For more than 200 years this area north of Geneva has produced micromechanical masterpieces of world acclaim.
Title: smeserver 7.12 - Strange shutdown msg
Post by: bpivk on March 25, 2007, 04:53:01 PM: Quote
Actually it is for dentist supplies and the website appears to be from India

Nice homework. :D

Well history will tell him what happened with his console.
Title: smeserver 7.12 - Strange shutdown msg
Post by: daley on March 25, 2007, 05:17:08 PM: I don't know why, my server was extremely slow at that moment, i was pressed Ctrl+Alt+Del to force reboot for my server.
Title: smeserver 7.12 - Strange shutdown msg
Post by: bpivk on March 25, 2007, 06:55:04 PM: Daley read my posts and reply.
Title: smeserver 7.12 - Strange shutdown msg
Post by: daley on March 26, 2007, 01:34:21 AM: Quote from: "bpivk"
This has something to do with automobiles.
Type history in ssh and check if there's anything strange reported.
If you find anything strange contact security at contribs dot org.

As resulted by history command, there isn't any special...

[root@ns1 ~]# history
1 uptime
2 ps -ef
3 uptime
4 uptime
5 uptime
6 uptime
7 uptime

Regards,
Daley
Title: smeserver 7.12 - Strange shutdown msg
Post by: bpivk on March 26, 2007, 11:01:52 AM: Now check the logs and i suggest that you go to the wiki and find a howto about public private keys for SSH. This is for extra security.

History sohuld give you a list of commands that were run trough ssh. The list should include every comand you entered into console so someone may have deleted the relevant data or you don't use ssh wery often.

Implement keys and check your logs.
Title: smeserver 7.12 - Strange shutdown msg
Post by: daley on March 27, 2007, 05:05:06 AM: I have received from admin...

I think this error properly caused by the following issue!!!

From: Cron Daemon <root@
Subject: Cron <root@ns1> /usr/bin/php -q /home/httpd/html/horde/kronolith/scripts/reminders.php

<html>
<head><title>Horde :: Fatal Error</title></head>
<body style="background:#fff; color:#000"><h1>A fatal error has occurred</h1><h3>DB Error: connect failed</h3><h3>Details have been logged for the administrator.</h3></body>
</html>

Regards,
Daley