Log inUsernamePassword
Log me on automatically each visit    
Register
Register
Log in to check your private messages
Log in to check your private messages
SMS Forum Index » Installation Support

Post new topic   Reply to topic
Hacked server?
View previous topic :: View next topic  
Author Message
simbad
Senior Member


Joined: 30 Jun 2011
Posts: 106

PostPosted: Tue Apr 17, 2012 12:42 pm    Post subject: Hacked server? Reply with quote

How is it possible that after a few days I can not log into Webmin with the 1000% correct data and returns the user name and password? Someone broke into the server?

I run webmin on port 443
Back to top
View user's profile Send private message
gerasimos_h
Site Admin


Joined: 09 Aug 2007
Posts: 1757
Location: Greece

PostPosted: Tue Apr 17, 2012 1:10 pm    Post subject: Reply with quote

I doubt it,
1. Check if webmin is running...

2. Look at /etc/webmin/webmin.acl to check if users are correct...

3. You can reset webmin password any time with
Code:
/usr/local/webmin/changepass.pl  /etc/webmin  [your user]  [yournewpassword]


4. Look at "var/log/secure" for possible break in attempts.

That's a reminder to add a fail2ban filter for webmin Smile

gerasimos_h

_________________
Superb! Mini Server Project Manager
http://sms.it-ccs.com
Back to top
View user's profile Send private message Visit poster's website
simbad
Senior Member


Joined: 30 Jun 2011
Posts: 106

PostPosted: Tue Apr 17, 2012 5:22 pm    Post subject: Reply with quote

root@xenya:~# pico /etc/webmin/webmin.acl

"myusername": webmincron clamav pam syslog-ng system-status dhcp-dns dansguardian dovecot mailscanner dyndns xinetd iscsitarget bsdexports dfsad$
user: status

root@xenya:~# /usr/local/webmin/changepass.pl /etc/webmin "myusername" "mynewpass"
The Webmin user "myusername" does not exist
The users on your system are: admin user
root@xenya:~# /usr/local/webmin/changepass.pl /etc/webmin admin "mypass"
Updated password of Webmin user admin
root@xenya:~#


...and i cant reset pass with sms tool

After reset pass with command line, i can t see module in webmin, only system info

what is the problem?
Back to top
View user's profile Send private message
baboo
Senior Member


Joined: 04 Sep 2007
Posts: 676

PostPosted: Tue Apr 17, 2012 6:07 pm    Post subject: Reply with quote

Hi simbad:

I have had trouble with changing passwd. For some reason webmin did not like my passwd. So, I do admin admin, then login to webmin and click on webmin users --> admin and set password to what I want.

Don't know if that will solve your problem but might be worth a try.
Back to top
View user's profile Send private message
gerasimos_h
Site Admin


Joined: 09 Aug 2007
Posts: 1757
Location: Greece

PostPosted: Tue Apr 17, 2012 6:42 pm    Post subject: Reply with quote

what is in your /etc/webmin/webmin.groups?

You webmin.acl has myusername, either change it to admin or add admin followed with your modules...
syntax is
user : modules allowed to see...

gerasimos_h

_________________
Superb! Mini Server Project Manager
http://sms.it-ccs.com
Back to top
View user's profile Send private message Visit poster's website
simbad
Senior Member


Joined: 30 Jun 2011
Posts: 106

PostPosted: Wed Apr 18, 2012 11:01 am    Post subject: Reply with quote

I have change "myusername" to admin and resest password with sms tools

administrators:"myusername":backup-config change-user usermin webminlog webmin servers acl init passwd quota mount fsdump logrotate mailcap proc at cron sentry software inittab man syslog useradmin apache bind8 dhcpd fetchmail mysql openslp openvpn postfix proftpd procmail $
Users:user:status::



Untitled.png
 Description:
 Filesize:  47.02 KB
 Viewed:  2262 Time(s)

Untitled.png


Back to top
View user's profile Send private message
gerasimos_h
Site Admin


Joined: 09 Aug 2007
Posts: 1757
Location: Greece

PostPosted: Wed Apr 18, 2012 11:33 am    Post subject: Reply with quote

edit webmin.groups and add admin to admiistrators...

Code:
administrators: admin myusername: backup-config change-user usermin webminlog webmin servers acl init passwd quota mount fsdump logrotate mailcap proc at cron sentry software inittab man syslog useradmin apache bind8 dhcpd fetchmail mysql openslp openvpn postfix proftpd procmail $


Aslo there shouldn't be any quotes in ("myusername")

gerasimos_h

_________________
Superb! Mini Server Project Manager
http://sms.it-ccs.com
Back to top
View user's profile Send private message Visit poster's website
simbad
Senior Member


Joined: 30 Jun 2011
Posts: 106

PostPosted: Wed Apr 18, 2012 11:48 am    Post subject: Reply with quote

i have this whitout ""
Back to top
View user's profile Send private message
simbad
Senior Member


Joined: 30 Jun 2011
Posts: 106

PostPosted: Fri Apr 20, 2012 8:13 am    Post subject: Reply with quote

It is not working
Back to top
View user's profile Send private message
gerasimos_h
Site Admin


Joined: 09 Aug 2007
Posts: 1757
Location: Greece

PostPosted: Fri Apr 20, 2012 9:12 am    Post subject: Reply with quote

Assuming you have admin user in webmin.acl and webmin.groups just run changepass.pl script with
Code:
/usr/local/webmin/changepass.pl  /etc/webmin  admin  [yournewpassword]

and it should work....

If that doesn't work backup /usr/local/webmin directory and re-install webmin with
Code:
slapt-get -u
slapt-get -i webmin --reinstall


gerasimos_h

_________________
Superb! Mini Server Project Manager
http://sms.it-ccs.com
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    SMS Forum Index » Installation Support All times are GMT + 2 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum

SMS - Superb! Mini Server Project © 2016
Powered by phpBB © 2001, 2002 phpBB Group
iCGstation v1.0 Template By Ray © 2003, 2004 iOptional