<HTML>
<HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META content="OPENWEBMAIL" name=GENERATOR>
</HEAD>
<BODY bgColor=#ffffff>
Could that server have been "rooted"?? Maybe its taken away a lot of the root privileges - to keep the exploit from being removed??
<br />
<br />
<br />Chuck
<br />
<br /><font size="2">
<br />
<br /><b>---------- Original Message
-----------</b>
<br />
From: Jeff Folk <jfolk@qzoneinc.com>
<br />
To: BlueOnyx General Mailing List <blueonyx@mail.blueonyx.it>
<br />
Sent: Fri, 3 Aug 2012 15:04:19 -0500
<br />
Subject: [BlueOnyx:11097] Re: Can't delete server administrator
<br />
<br />> On Aug 3, 2012, at 12:41 PM, Michael Stauber wrote:
<br />>
<br />>
> Hi Michael, hi Jeff,
<br />>
>
<br />>
>>> The error is "Unable to remove the root user account,
root-username".
<br />>
>
<br />>
> Ok, I have fixed it in SVN and also uploaded fixed base-user* RPMs to
<br />>
> the YUM repositories:
<br />>
>
<br />>
> <a target="_blank" href="http://devel.blueonyx.it/trac/changeset/918/">http://devel.blueonyx.it/trac/changeset/918/</a>
<br />>
>
<br />>
> The problem was that the /usr/sbin/userdel command on 5107R and 5108R
<br />>
> claims that the extra admin is still logged in (even if it is not) and
<br />>
> therefore refused to delete that account.
<br />>
>
<br />>
> The work around I applied is to "--force" the account deletion
instead,
<br />>
> which skips that check. As I didn't want to apply more "force"
than
<br />>
> required, only extra server admins are deleted this way, while all the
<br />>
> other users (and siteAdmin's) get deleted in the "old" way.
<br />>
<br />>
Mine must be more messed up than that. Here is the messages log when I try to
delete a server admin:
<br />>
<br />>
Aug 3 14:57:40 box1 cced(smd)[28984]: client
6:handlers/base/console/generate_process_list.pl: SET succeeded
<br />>
Aug 3 14:57:40 box1 cced(smd)[28984]: client 6:[48:3746]: SET succeeded
<br />>
Aug 3 14:58:02 box1 cced(smd)[29122]: client [0:29119] has admin rights
<br />>
Aug 3 14:58:02 box1 cced(smd)[29127]: client [0:29124] has admin rights
<br />>
Aug 3 14:58:54 box1 cced(smd)[29252]: client 6:[48:3741]: DESTROY
178
<br />>
Aug 3 14:58:59 box1 cced(smd)[29252]: client
6:handlers/base/user/reserve_email.pl: DESTROY 179
<br />>
Aug 3 14:58:59 box1 cced(smd)[29252]: client
6:handlers/base/user/reserve_email.pl: DESTROY succeeded
<br />>
Aug 3 14:59:00 box1 cced(smd)[29252]: handler
handlers/base/user/root_access.pl failed
<br />>
Aug 3 14:59:01 box1 cced(smd)[29477]: client [0:29474] has admin rights
<br />>
Aug 3 14:59:01 box1 cced(smd)[29482]: client [0:29479] has admin rights
<br />>
Aug 3 14:59:04 box1 cced(smd)[29252]: client 6:[48:3741]: DESTROY failed
<br />>
<br />>
The problem appears to be in root_access. I can't remove or add root access to
either of the server admin users. Trying to add root access to box1admin:
<br />>
<br />>
Aug 3 15:03:06 box1 cced(smd)[30673]: client 6:[48:3744]: SET 178
"fullName" "=" "Server Admin"
"capLevels" "="
"&adminUser&ipPooling&controlPower&"
"sortName" "=" "" "ui_enabled"
"=" "0"
<br />>
Aug 3 15:03:06 box1 cced(smd)[30673]: client 6:[48:3744]: SET succeeded
<br />>
Aug 3 15:03:06 box1 cced(smd)[30673]: client 6:[48:3744]: SET 178 .
Disk "quota" "=" "20"
<br />>
Aug 3 15:03:06 box1 cced(smd)[30673]: client 6:[48:3744]: SET succeeded
<br />>
Aug 3 15:03:06 box1 cced(smd)[30673]: client 6:[48:3744]: SET 178 .
RootAccess "enabled" "=" "1"
<br />>
Aug 3 15:03:08 box1 cced(smd)[30673]: client
6:handlers/base/user/root_access.pl: CREATE ProtectedEmailAlias
local_alias = 1 action = box1admin alias = "root-box1admin"
<br />>
Aug 3 15:03:09 box1 cced(smd)[30673]: handler
handlers/base/email/newaliases.pl failed
<br />>
Aug 3 15:03:09 box1 cced(smd)[30673]: client
6:handlers/base/user/root_access.pl: CREATE failed
<br />>
Aug 3 15:03:09 box1 cced(smd)[30673]: handler
handlers/base/user/root_access.pl failed
<br />>
Aug 3 15:03:10 box1 cced(smd)[30673]: client 6:[48:3744]: SET failed
<br />>
Aug 3 15:03:10 box1 cced(smd)[30673]: client 6:[48:3744]: SET 178 .
Shell "enabled" "=" "1"
<br />>
Aug 3 15:03:10 box1 cced(smd)[30673]: client 6:[48:3744]: SET succeeded
<br />>
<br />>
Regards;
<br />>
Jeff
<br />>
<br />>
_______________________________________________
<br />>
Blueonyx mailing list
<br />>
Blueonyx@mail.blueonyx.it
<br />>
<a target="_blank" href="http://mail.blueonyx.it/mailman/listinfo/blueonyx">http://mail.blueonyx.it/mailman/listinfo/blueonyx</a>
<br /><b>------- End of Original Message
-------</b>
<br />
</font>
</BODY>
</HTML>