Error 503 only on Plesk Control Panel, all customer webs working

[AZJeremy]

Tried to log into a server this morning that I haven't logged into in a while and received "Error 503 - Service Not Available" when trying to access the Plesk Control Panel. I have searched through the forums and found people that were having somewhat similar problems but not exactly the same. I was not in the process of doing an upgrade when the error occurred and all of the customer sites seem to be working okay from the dozen or so I tested randomly. It's only the Plesk Control panel that generates this error. Here are the details -

Plesk version 11.09
Running on Centos v 6.4 64 bit
load on machine is minimal, hard drive space is fine, memory is fine, number of processes is not suspiciously high

When I attempt to restart psa it seems to restart fine, same with httpd

When I look in /var/log/sw-cp-server/error_log I don't really see much info -

2013-11-25 10:15:22: (connections.c.309) SSL: 1 error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request
2013-11-25 10:42:13: (connections.c.309) SSL: 1 error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request
2013-11-25 10:55:49: (connections.c.309) SSL: 1 error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request

When I look in /usr/local/psa/admin/logs/httpsd_access_log I see -

::ffffI'm replacing my IP) (And the server name too):8443 - [25/Nov/2013:11:43:14 -0700] "GET / HTTP/1.1" 503 369 "-" "Mozilla/5.0 (Windows NT 6.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.57 Safari/537.36"

/usr/local/psa/admin/logs/panel.log doesn't log anything when I try to access the control panel.

Nothing relevant seems to be getting logged in anything in /var/log when I try to access the control panel page.

Yum updates were installed on this server about a week and a half ago, here is a list of what was updated:

Nov 13 13:11:14 Updated: tzdata-2013g-1.el6.noarch
Nov 13 13:11:15 Updated: nss-softokn-freebl-3.14.3-3.el6_4.x86_64
Nov 13 13:11:27 Updated: glibc-common-2.12-1.107.el6_4.5.x86_64
Nov 13 13:11:34 Updated: glibc-2.12-1.107.el6_4.5.x86_64
Nov 13 13:11:35 Updated: chkconfig-1.3.49.3-2.el6_4.1.x86_64
Nov 13 13:11:35 Updated: libcom_err-1.41.12-14.el6_4.4.x86_64
Nov 13 13:11:36 Updated: krb5-libs-1.10.3-10.el6_4.6.x86_64
Nov 13 13:11:36 Updated: nspr-4.9.5-2.el6_4.x86_64
Nov 13 13:11:38 Updated: nss-util-3.14.3-3.el6_4.x86_64
Nov 13 13:11:38 Updated: libudev-147-2.46.el6_4.2.x86_64
Nov 13 13:11:39 Updated: db4-4.7.25-18.el6_4.x86_64
Nov 13 13:11:40 Updated: postgresql-libs-8.4.18-1.el6_4.x86_64
Nov 13 13:11:41 Updated: udev-147-2.46.el6_4.2.x86_64
Nov 13 13:11:42 Updated: device-mapper-1.02.77-9.el6_4.3.x86_64
Nov 13 13:11:43 Updated: device-mapper-libs-1.02.77-9.el6_4.3.x86_64
Nov 13 13:11:43 Updated: device-mapper-event-libs-1.02.77-9.el6_4.3.x86_64
Nov 13 13:11:46 Updated: postgresql-8.4.18-1.el6_4.x86_64
Nov 13 13:11:47 Updated: 1:cups-libs-1.4.2-50.el6_4.5.x86_64
Nov 13 13:11:47 Updated: 32:bind-libs-9.8.2-0.17.rc1.el6_4.6.x86_64
Nov 13 13:11:48 Updated: libss-1.41.12-14.el6_4.4.x86_64
Nov 13 13:11:48 Updated: libtar-1.2.11-17.el6_4.1.x86_64
Nov 13 13:11:49 Updated: libreport-plugin-rhtsupport-2.0.9-15.el6.centos.1.x86_64
Nov 13 13:11:49 Updated: libreport-python-2.0.9-15.el6.centos.1.x86_64
Nov 13 13:11:50 Updated: libreport-compat-2.0.9-15.el6.centos.1.x86_64
Nov 13 13:11:50 Updated: libreport-2.0.9-15.el6.centos.1.x86_64
Nov 13 13:11:51 Updated: libreport-plugin-reportuploader-2.0.9-15.el6.centos.1.x86_64
Nov 13 13:11:51 Updated: abrt-libs-2.0.8-16.el6.centos.1.x86_64
Nov 13 13:11:53 Updated: abrt-2.0.8-16.el6.centos.1.x86_64
Nov 13 13:11:54 Updated: libgcrypt-1.4.5-11.el6_4.x86_64
Nov 13 13:11:54 Updated: libipa_hbac-1.9.2-82.10.el6_4.x86_64
Nov 13 13:11:55 Updated: abrt-addon-python-2.0.8-16.el6.centos.1.x86_64
Nov 13 13:11:55 Updated: abrt-tui-2.0.8-16.el6.centos.1.x86_64
Nov 13 13:11:55 Updated: libreport-plugin-kerneloops-2.0.9-15.el6.centos.1.x86_64
Nov 13 13:11:56 Updated: abrt-addon-kerneloops-2.0.8-16.el6.centos.1.x86_64
Nov 13 13:11:56 Updated: libreport-cli-2.0.9-15.el6.centos.1.x86_64
Nov 13 13:11:57 Updated: libreport-plugin-logger-2.0.9-15.el6.centos.1.x86_64
Nov 13 13:11:57 Updated: libreport-plugin-mailx-2.0.9-15.el6.centos.1.x86_64
Nov 13 13:11:57 Updated: device-mapper-event-1.02.77-9.el6_4.3.x86_64
Nov 13 13:11:58 Updated: lvm2-libs-2.02.98-9.el6_4.3.x86_64
Nov 13 13:11:59 Updated: httpd-tools-2.2.15-29.el6.centos.x86_64
Nov 13 13:12:01 Updated: httpd-2.2.15-29.el6.centos.x86_64
Nov 13 13:12:02 Updated: nss-softokn-3.14.3-3.el6_4.x86_64
Nov 13 13:12:03 Updated: nss-3.14.3-4.el6_4.x86_64
Nov 13 13:12:03 Updated: nss-sysinit-3.14.3-4.el6_4.x86_64
Nov 13 13:12:04 Updated: abrt-addon-ccpp-2.0.8-16.el6.centos.1.x86_64
Nov 13 13:12:04 Updated: sssd-client-1.9.2-82.10.el6_4.x86_64
Nov 13 13:12:06 Updated: samba-winbind-3.6.9-151.el6_4.1.x86_64
Nov 13 13:12:07 Updated: samba-winbind-clients-3.6.9-151.el6_4.1.x86_64
Nov 13 13:12:09 Updated: samba-common-3.6.9-151.el6_4.1.x86_64
Nov 13 13:12:10 Updated: e2fsprogs-libs-1.41.12-14.el6_4.4.x86_64
Nov 13 13:12:10 Updated: libcom_err-devel-1.41.12-14.el6_4.4.x86_64
Nov 13 13:12:11 Updated: libsss_idmap-1.9.2-82.10.el6_4.x86_64
Nov 13 13:12:11 Updated: polkit-0.96-5.el6_4.x86_64
Nov 13 13:12:12 Updated: polkit-docs-0.96-5.el6_4.x86_64
Nov 13 13:12:13 Updated: polkit-devel-0.96-5.el6_4.x86_64
Nov 13 13:12:13 Updated: db4-cxx-4.7.25-18.el6_4.x86_64
Nov 13 13:12:14 Updated: 12:dhcp-common-4.1.1-34.P1.el6_4.1.x86_64
Nov 13 13:12:15 Updated: sos-2.2-38.el6.centos.2.noarch
Nov 13 13:12:19 Updated: kernel-headers-2.6.32-358.23.2.el6.x86_64
Nov 13 13:12:22 Updated: glibc-headers-2.12-1.107.el6_4.5.x86_64
Nov 13 13:12:22 Updated: setup-2.8.14-20.el6_4.1.noarch
Nov 13 13:12:30 Updated: selinux-policy-3.7.19-195.el6_4.18.noarch
Nov 13 13:12:31 Updated: tzdata-java-2013g-1.el6.noarch
Nov 13 13:12:39 Updated: 1:java-1.6.0-openjdk-1.6.0.0-1.65.1.11.14.el6_4.x86_64
Nov 13 13:12:42 Updated: kernel-firmware-2.6.32-358.23.2.el6.noarch
Nov 13 13:12:49 Installed: kernel-2.6.32-358.23.2.el6.x86_64
Nov 13 13:12:50 Updated: 1:autofs-5.0.5-75.el6_4.x86_64
Nov 13 13:12:53 Updated: 1:java-1.6.0-openjdk-devel-1.6.0.0-1.65.1.11.14.el6_4.x86_64
Nov 13 13:13:45 Updated: selinux-policy-targeted-3.7.19-195.el6_4.18.noarch
Nov 13 13:13:45 Updated: 2:xinetd-2.3.14-39.el6_4.x86_64
Nov 13 13:13:46 Updated: glibc-devel-2.12-1.107.el6_4.5.x86_64
Nov 13 13:13:47 Updated: abrt-cli-2.0.8-16.el6.centos.1.x86_64
Nov 13 13:13:47 Updated: 12:dhclient-4.1.1-34.P1.el6_4.1.x86_64
Nov 13 13:13:51 Updated: db4-devel-4.7.25-18.el6_4.x86_64
Nov 13 13:13:53 Updated: sssd-1.9.2-82.10.el6_4.x86_64
Nov 13 13:13:54 Updated: krb5-devel-1.10.3-10.el6_4.6.x86_64
Nov 13 13:13:55 Updated: e2fsprogs-1.41.12-14.el6_4.4.x86_64
Nov 13 13:13:57 Updated: samba-3.6.9-151.el6_4.1.x86_64
Nov 13 13:13:59 Updated: samba-client-3.6.9-151.el6_4.1.x86_64
Nov 13 13:14:00 Updated: nss-tools-3.14.3-4.el6_4.x86_64
Nov 13 13:14:01 Updated: httpd-manual-2.2.15-29.el6.centos.noarch
Nov 13 13:14:02 Updated: httpd-devel-2.2.15-29.el6.centos.x86_64
Nov 13 13:14:03 Updated: 1:mod_ssl-2.2.15-29.el6.centos.x86_64
Nov 13 13:14:04 Updated: lvm2-2.02.98-9.el6_4.3.x86_64
Nov 13 13:14:04 Updated: libipa_hbac-python-1.9.2-82.10.el6_4.x86_64
Nov 13 13:14:06 Updated: gnupg2-2.0.14-6.el6_4.x86_64
Nov 13 13:14:06 Updated: libgcrypt-devel-1.4.5-11.el6_4.x86_64
Nov 13 13:14:07 Updated: krb5-workstation-1.10.3-10.el6_4.6.x86_64
Nov 13 13:14:09 Updated: 32:bind-9.8.2-0.17.rc1.el6_4.6.x86_64
Nov 13 13:14:09 Updated: 32:bind-utils-9.8.2-0.17.rc1.el6_4.6.x86_64
Nov 13 13:14:12 Updated: 1:cups-1.4.2-50.el6_4.5.x86_64
Nov 13 13:14:14 Updated: postgresql-server-8.4.18-1.el6_4.x86_64
Nov 13 13:14:18 Updated: postgresql-devel-8.4.18-1.el6_4.x86_64
Nov 13 13:14:19 Updated: kpartx-0.4.9-64.el6_4.2.x86_64
Nov 13 13:14:19 Updated: mdadm-3.2.5-4.el6_4.3.x86_64
Nov 13 13:14:20 Updated: db4-utils-4.7.25-18.el6_4.x86_64
Nov 13 13:14:20 Updated: libgudev1-147-2.46.el6_4.2.x86_64
Nov 13 13:14:21 Updated: 1:cpuspeed-1.5-20.el6_4.x86_64
Nov 13 13:14:23 Updated: rsyslog-5.8.10-7.el6_4.x86_64
Nov 13 13:14:24 Updated: 1:microcode_ctl-1.17-15.el6_4.x86_64
Nov 13 13:14:24 Updated: iputils-20071127-17.el6_4.2.x86_64
Nov 13 13:14:25 Updated: ntsysv-1.3.49.3-2.el6_4.1.x86_64
Nov 13 13:14:25 Updated: rsync-3.0.6-9.el6_4.1.x86_64
Nov 13 13:14:26 Updated: prelink-0.4.6-3.1.el6_4.x86_64
Nov 13 13:14:27 Updated: perf-2.6.32-358.23.2.el6.x86_64
Nov 13 13:14:27 Updated: libsss_autofs-1.9.2-82.10.el6_4.x86_64
Nov 13 13:14:28 Updated: 1:busybox-1.15.1-16.el6_4.x86_64
Nov 13 13:14:28 Updated: nss-softokn-freebl-3.14.3-3.el6_4.i686
Nov 13 13:14:31 Updated: glibc-2.12-1.107.el6_4.5.i686
Nov 13 13:14:31 Updated: libcom_err-1.41.12-14.el6_4.4.i686
Nov 13 13:14:32 Updated: krb5-libs-1.10.3-10.el6_4.6.i686

Can anyone offer any suggestions on something I could try? Are there any log files I missed that might explain? Could any of these updates have caused the issue? Just trying to figure out what my next step should be.

 

[HMoellendorf87]

Hi AZJeremy,

it sounds like a redirection error or that your client doesn't support SSL connections.
Could you confirm, that your client is SSL enabled?

Kind regards
Henning

 

[AZJeremy]

Fairly sure that's not the case. I have other Plesk servers I'm able to access using the same computer and the same browser. Additionally I tried accessing the control panel using multiple browsers on other machines as well.

 

[HMoellendorf87]

Can you verify, that your certificate is correctly installed?
Sounds definitively like a redirecting problem ... As far as I could found on the internet ...

Please try to restart named and then a new try to login please....

 

[Eric Pretorious]

Can you verify, that your certificate is correctly installed?

Networking4All provides a great on-line tool for testing SSL. It can be used to test...

• https,
• ftps,
• imaps,
• pop3s,
• smtps, and
• ldaps

 

[AZJeremy]

According to that tool the certificate is expired, but we don't even have a real certificate installed on that machine as our customers manage their accounts through another interface. I don't believe the certificate would be the cause of the issue as it hasn't changed. Can you give me an example of what I should look for in the log files (and which log files I should look in) for any errors I would see to confirm whether or not it is a redirection issue?

 

[AZJeremy]

Actually, I apologize, I neglected to include the port on the end of the url when I used the tool at Networking4all. When I use the site url without the port it shows the generic Parallels certificate that is used by sites with no certificate, when I include 8443 on the end of the url it shows that the certificate is functional, the only problem listed is "Accepting Low Encryption Cypher Suites".

 

[AZJeremy]

Just figured out what the issue was - I had forgotten this was the second iteration of this server (as I said I hadn't logged into it in quite a while). While we had a forward dns record pointed to the IP address the server was using the entry in /etc/hosts didn't match the name I was typing into the URL. When I changed the name I was typing in to get to the control panel it worked fine. Updating the hostname on the machine fixed the issue. Thanks for the suggestions.