Solved phonesystem : a password is required

[Helmut72]

Hi,

after installing 3CX with the Debain 10 image I found that root is spammed every 2 hours with:

3CX.mydomain : Jan 30 17:29:06 : phonesystem : a password is required ; TTY=unknown ; PWD=/var/lib/3cxpbx ; USER=root ; COMMAND=/usr/sbin/3CXPinningFileUpdate https://downloads-global.3cx.com/downloads/v180/debianupdate/buster.txt

Any tips?

Thank you!

 

[VasilisV_3CX]

Hi @Helmut72,

Where is this message from, the Sys log?

 

[Helmut72]

I don't know but it seems a scheduled task or so:

helmut@3CX:~$ sudo mail
Mail version 8.1.2 01/15/2001. Type ? for help.
"/var/mail/root": 194 messages 194 unread
>U 1 [email protected] Fri Jan 14 21:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 2 [email protected] Fri Jan 14 23:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 3 [email protected] Sat Jan 15 01:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 4 [email protected] Sat Jan 15 03:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 5 [email protected] Sat Jan 15 05:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 6 [email protected] Sat Jan 15 07:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 7 [email protected] Sat Jan 15 09:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 8 [email protected] Sat Jan 15 11:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 9 [email protected] Sat Jan 15 13:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 10 [email protected] Sat Jan 15 15:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 11 [email protected] Sat Jan 15 17:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 12 [email protected] Sat Jan 15 19:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 13 [email protected] Sat Jan 15 21:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 14 [email protected] Sat Jan 15 23:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 15 [email protected] Sun Jan 16 01:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 16 [email protected] Sun Jan 16 03:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 17 [email protected] Sun Jan 16 05:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 18 [email protected] Sun Jan 16 07:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 19 [email protected] Sun Jan 16 09:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 20 [email protected] Sun Jan 16 11:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 21 [email protected] Sun Jan 16 13:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 22 [email protected] Sun Jan 16 15:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 23 [email protected] Sun Jan 16 17:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 24 [email protected] Sun Jan 16 19:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 25 [email protected] Sun Jan 16 21:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 26 [email protected] Sun Jan 16 23:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 27 [email protected] Mon Jan 17 01:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 28 [email protected] Mon Jan 17 03:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 29 [email protected] Mon Jan 17 05:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 30 [email protected] Mon Jan 17 07:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 31 [email protected] Mon Jan 17 09:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 32 [email protected] Mon Jan 17 11:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 33 [email protected] Mon Jan 17 13:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 34 [email protected] Mon Jan 17 15:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 35 [email protected] Mon Jan 17 17:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 36 [email protected] Mon Jan 17 19:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 37 [email protected] Mon Jan 17 21:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 38 [email protected] Mon Jan 17 23:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 39 [email protected] Tue Jan 18 01:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 40 [email protected] Tue Jan 18 03:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 41 [email protected] Tue Jan 18 05:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 42 [email protected] Tue Jan 18 07:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 43 [email protected] Tue Jan 18 09:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 44 [email protected] Tue Jan 18 11:29 17/789 *** SECURITY information for 3CX.mydomain ***
U 45 [email protected] Tue Jan 18 13:29 17/789 *** SECURITY information for 3CX.mydomain ***
&

I checked crontabs but couldn't find anything.

From [email protected] Sun Jan 30 19:29:07 2022
X-Original-To: root
To: [email protected]
From: [email protected]
Auto-Submitted: auto-generated
Subject: *** SECURITY information for 3CX.mydomain ***
Date: Sun, 30 Jan 2022 19:29:06 +0100 (CET)

3CX.mydomain : Jan 30 19:29:06 : phonesystem : a password is required ; TTY=unknown ; PWD=/var/lib/3cxpbx ; USER=root ; COMMAND=/usr/sbin/3CXPinningFileUpdate https://downloads-global.3cx.com/downloads/v180/debianupdate/buster.txt

 

[VasilisV_3CX]

Hi @Helmut72,

Do you have "Automatically update 3CX" enabled under Settings >> Updates in the Management Console? I believe the message you're getting could be coming from the 'On Linux systems, this option also automatically installs Debian Security Updates.'

 

[Helmut72]

Yes, automatic updates are enabled.

But what confuses me is the "a password is required" message. Running the command manually does not cause an error:

[root@3CX ~]# /usr/sbin/3CXPinningFileUpdate https://downloads-global.3cx.com/downloads/v180/debianupdate/buster.txt
--2022-01-31 17:16:13-- https://downloads-global.3cx.com/downloads/v180/debianupdate/buster.txt
Resolving downloads-global.3cx.com (downloads-global.3cx.com)... 104.22.14.119, 104.22.15.119, 172.67.39.236, ...
Connecting to downloads-global.3cx.com (downloads-global.3cx.com)|104.22.14.119|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/plain]
Saving to: _/tmp/pinning.tmp_

/tmp/pinning.tmp [ <=> ] 24.41K --.-KB/s in 0.001s

2022-01-31 17:16:13 (20.2 MB/s) - _/tmp/pinning.tmp_ saved [24998]

Pin file downloaded
[root@3CX ~]#

Not sure what "phonesystem" is trying to do here.

 

[Helmut72]

The issue was that an entry in sudoers was missing:

phonesystem ALL=(ALL) NOPASSWD: /usr/sbin/3CXPinningFileUpdate

 

[VasilisV_3CX]

Great find @Helmut72! Good job! If you require anything else, feel free to open a new thread.