Форум

TASK [web : update site config] ************************************************
changed: [portal] => (item={u'CompositeExcludeParams': [], u'CronTask': u'disable', u'NginxPort': 80, u'NginxHTTPSConfig': u'ssl.s1.conf', u'DBType': u'mysql', u'ApacheConfScale': u'/etc/httpd/bx-scale/conf/default.conf', u'ApacheConf': u'/etc/httpd/bx/conf/default.conf', u'DBPassword': u'***************', u'BackupDay': u'', u'module_main_version': u'17.5.4', u'CompositeStatus': u'disable', u'BackupMinute': u'', u'NginxHTTPEDir': u'/etc/nginx/bx/site_enabled', u'CompositeDomains': [], u'SphinxConnection': u'127.0.0.1:9306', u'DocumentRoot': u'/home/bitrix/www', u'HTTPSCert': u'/etc/nginx/ssl/cert.pem', u'message': u'', u'BackupTask': u'disable', u'DBConn': u'Y', u'SiteShort': u'default', u'module_message': u'', u'SiteCsync2': u'default', u'CronFile': u'', u'module_scale': u'installed', u'SiteName': u'default', u'HTTPSCertChain': u'', u'proxy_ignore_client_abort': u'off', u'SiteKernelDir': u'', u'CompositeIncludeUri': [], u'CompositeMemcachedPort': u'', u'SiteStatus': u'finished', u'BackupFolder': u'', u'SMTPPort': u'25', u'NTLM_use_ntlm': u'N', u'DBHost': u'localhost', u'SiteInstall': u'kernel', u'NginxHTTPConfig': u's1.conf', u'DBLogin': u'bitrix0', u'BackupMonth': u'', u'phpSessionDir': u'/tmp/php_sessions/www', u'ModuleScale': u'', u'CompositeExcludeUri': [], u'EmailAccount': u'default', u'ServerName': u'portal.sbgs.ru', u'error': 0, u'NTLM_module': u'Y', u'SiteCharset': u'utf-8', u'phpUploadDir': u'/tmp/php_upload/www', u'NginxType': u'single', u'HTTPS': u'disable', u'CompositeError': u'', u'HTTPSCertType': u'general', u'CompositeMemcachedHost': u'', u'BackupCronFile': u'', u'CompositeNginxID': u'02', u'module_cluster': u'installed', u'NginxHTTPSFullPath': u'/etc/nginx/bx/site_avaliable/ssl.s1.conf', u'NTLM_bitrixvm_auth_support': u'N', u'BackupHour': u'', u'SMTPPassword': u'***************', u'SphinxIndexName': u'bitrix', u'CompositeNginx': u'disable', u'CompositeStorage': u'', u'SMTPTLS': u'on', u'BackupWeekDay': u'', u'BackupVersion': u'', u'SMTPUser': u'portal@sbgs.ru', u'ModuleCluster': u'', u'EmailAddress': u'portal@sbgs.ru', u'DBName': u'sitemanager', u'SMTPHost': u'smtp.timeweb.ru', u'HTTPSPriv': u'/etc/nginx/ssl/cert.pem', u'phpMsmtpAccount': u'default', u'CompositeNginxMap': u'', u'SiteKernelDB': u'', u'NginxHTTPDir': u'/etc/nginx/bx/site_avaliable', u'CronService': {}, u'HTTPSConf': u'/etc/nginx/bx/conf/ssl.conf'})

TASK [web : delete include] ****************************************************

TASK [web : update site config] ************************************************

TASK [web : restart nginx] *****************************************************
fatal: [portal]: FAILED! => {"changed": false, "failed": true, "msg": "Unable to start service nginx: Job for nginx.service failed because the control process exited with error code. See \"systemctl status nginx.service\" and \"journalctl -xe\" for details.\n"}

NO MORE HOSTS LEFT *************************************************************
       to retry, use: --limit @/etc/ansible/web.retry

PLAY RECAP *********************************************************************
portal                     : ok=15   changed=4    unreachable=0    failed=1

Сейчас почему-то портал не отвечает, хотя я ничего не делала, только отправила еще 1 запрос на ssl!!!


[root@portal ~]# systemctl status nginx.service
Б?? nginx.service - nginx - high performance web server
  Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; vendor preset                                                                                                             : disabled)
  Active: failed (Result: exit-code) since Wed 2017-12-13 18:37:49 +05; 54min a                                                                                                             go
    Docs: http://nginx.org/en/docs/
 Process: 1285 ExecStartPre=/usr/sbin/nginx -t -c /etc/nginx/nginx.conf (code=e                                                                                                             xited, status=1/FAILURE)

Dec 13 18:37:49 portal.sbgs.ru systemd[1]: Starting nginx - high performance....
Dec 13 18:37:49 portal.sbgs.ru nginx[1285]: nginx: [emerg] host not found in...8
Dec 13 18:37:49 portal.sbgs.ru nginx[1285]: nginx: configuration file /etc/n...d
Dec 13 18:37:49 portal.sbgs.ru systemd[1]: nginx.service: control process ex...1
Dec 13 18:37:49 portal.sbgs.ru systemd[1]: Failed to start nginx - high perf....
Dec 13 18:37:49 portal.sbgs.ru systemd[1]: Unit nginx.service entered failed....
Dec 13 18:37:49 portal.sbgs.ru systemd[1]: nginx.service failed.
Hint: Some lines were ellipsized, use -l to show in full.





[root@portal ~]# journalctl -xe
Dec 13 19:32:01 portal.sbgs.ru systemd[1]: Started Session 121 of user root.
-- Subject: Unit session-121.scope has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit session-121.scope has finished starting up.
--
-- The start-up result is done.
Dec 13 19:32:01 portal.sbgs.ru systemd[1]: Starting Session 121 of user root.
-- Subject: Unit session-121.scope has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit session-121.scope has begun starting up.
Dec 13 19:32:01 portal.sbgs.ru CROND[3152]: (bitrix) CMD (php -f /home/bitrix/www/bitrix/php_interface/cron_events.php)
Dec 13 19:32:01 portal.sbgs.ru CROND[3153]: (root) CMD (/opt/webdir/bin/restart_httpd-scale.sh process)
Dec 13 19:32:02 portal.sbgs.ru sshd[3145]: Failed password for root from 192.168.71.1 port 55751 ssh2
Dec 13 19:32:02 portal.sbgs.ru sshd[3145]: error: maximum authentication attempts exceeded for root from 192.168.71.1 port 55751 ssh2 [preauth]
Dec 13 19:32:02 portal.sbgs.ru sshd[3145]: Disconnecting: Too many authentication failures [preauth]
Dec 13 19:32:02 portal.sbgs.ru sshd[3145]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.71.1  user=root
Dec 13 19:32:02 portal.sbgs.ru sshd[3145]: PAM service(sshd) ignoring max retries; 6 > 3
Dec 13 19:32:02 portal.sbgs.ru systemd[1]: Removed slice User Slice of bitrix.
-- Subject: Unit user-600.slice has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit user-600.slice has finished shutting down.
Dec 13 19:32:02 portal.sbgs.ru systemd[1]: Stopping User Slice of bitrix.
-- Subject: Unit user-600.slice has begun shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit user-600.slice has begun shutting down.
Dec 13 19:32:08 portal.sbgs.ru sshd[3147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.71.1  user=root
Dec 13 19:32:08 portal.sbgs.ru sshd[3147]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Dec 13 19:32:09 portal.sbgs.ru sshd[3147]: Failed password for root from 192.168.71.1 port 55770 ssh2
Dec 13 19:32:10 portal.sbgs.ru sshd[3147]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Dec 13 19:32:12 portal.sbgs.ru sshd[3147]: Failed password for root from 192.168.71.1 port 55770 ssh2
Dec 13 19:32:13 portal.sbgs.ru sshd[3147]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Dec 13 19:32:15 portal.sbgs.ru sshd[3147]: Failed password for root from 192.168.71.1 port 55770 ssh2
Dec 13 19:32:16 portal.sbgs.ru sshd[3147]: error: maximum authentication attempts exceeded for root from 192.168.71.1 port 55770 ssh2 [preauth]
Dec 13 19:32:16 portal.sbgs.ru sshd[3147]: Disconnecting: Too many authentication failures [preauth]
Dec 13 19:32:16 portal.sbgs.ru sshd[3147]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.71.1  user=root
Dec 13 19:32:25 portal.sbgs.ru sshd[3157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.71.1  user=root
Dec 13 19:32:25 portal.sbgs.ru sshd[3157]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Dec 13 19:32:27 portal.sbgs.ru sshd[3157]: Failed password for root from 192.168.71.1 port 55794 ssh2
Dec 13 19:32:28 portal.sbgs.ru sshd[3157]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Dec 13 19:32:30 portal.sbgs.ru sshd[3157]: Failed password for root from 192.168.71.1 port 55794 ssh2
Dec 13 19:32:31 portal.sbgs.ru sshd[3157]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"

Нас кто-то пытается вскрыть по ssh? Я-то пароль верно набиваю. КТО-то может пояснить?

Добрый день!

Замечена ситуация, когда генерится такой пароль для root mysql в VM,
что дальше ничего работать не хочет...

Помогает только снос пароля через "set-environment MYSQLD_OPTS="--skip-grant-tables"