lsapi:error in Apache error_log
Forum
For more information on the latest vulnerability (CVE-2018-12130, CVE-2018-12126, CVE-2018-12127, and CVE-2019-11091),
please refer to our blog post
  1. Forums
  2. CloudLinux and Control Panels
  3. CloudLinux and cPanel
  1. Morten
  2. Monday, 15 April 2019
  3.  Subscribe via email
Hello,

We have a customer with Magento and suddenly they started to get 503 error in backend of Magento.
Checking apache error logs I find these:
[Mon Apr 15 11:24:06.310795 2019] [lsapi:error] [pid 1200210:tid 47435881735936] [client 139.xx.xx.xx:59548] [host domain.tld] Error receiving response: ReceiveResponse: receive pkg hdr failed: ReceivePkgHdr: nothing to read from backend (LVE ID 557), check http://docs.cloudlinux.com/mod_lsapi_troubleshooting.html, referer: https://domain.tld/

I cannot see any issues with either PHP, mod_sec or resources for this account.
Why cannot customers find these logs themselves in cPanel/error_log? Is there a way for customer to get access to these logs?

Any suggestions on where to check what is causing this issue?
Rate this post:
  1. 15.04.2019 10:04:13
  2. # 1
Morten Accepted Answer
Posts: 5
Joined: 16.04.2018
0
Votes
Undo
In this case it seems like the issue was PHP version as customer has old Magento.

It seems like a update from your servers caused the PHP version change in WHM.
Customer was using native, but it was changed to use ea-php and not alt-php, even though logs show something else:
[Tue Apr 09 02:50:23 2019] sulsphp: uid:(557/username); gid:(557/username); with suexec mode; cmd:(/opt/cpanel/ea-php70/root/usr/bin/lsphp)
[Tue Apr 09 02:51:09 2019] sulsphp: uid:(557/username); gid:(557/username); with suexec mode; cmd:(/opt/cloudlinux/alt-php53/root/usr/bin/lsphp)

Not sure why you show incorrect or like that in the logs though.
Customer is now using Alt-PHP 5.6, but showing this in sulsphp_log:

[Mon Apr 15 12:36:06 2019] sulsphp: uid:(557/username); gid:(557/username); with suexec mode; cmd:(/opt/cpanel/ea-php70/root/usr/bin/lsphp)
  1. 16.04.2019 10:04:22
  2. # 2
Igor Ghertesco Accepted Answer
Posts: 154
Joined: 07.08.2015
0
Votes
Undo
Hello,

Please submit a ticket to our support team at https://cloudlinux.zendesk.com, so we could take a closer look,

Thank you.
  • Page :
  • 1


There are no replies made for this post yet.
Be one of the first to reply to this post!
Guest
Submit Your Response
Upload files or images for this discussion by clicking on the upload button below. Supports gif,jpg,png,zip,rar,pdf
• Insert • Remove Upload Files (Maximum File Size: 2 MB)
Captcha
To protect the site from bots and unauthorized scripts, we require that you enter the captcha codes below before posting your question.