Server shuts down every night

[Guest]

[jtramone]

Hello

My Endian 2.4.1 server (VMware virtual machine) has been acting quite strangely: it shuts down every night at 9:55pm!

Log says "Job halt started for user root (pid 666)" (/var/log/messages):

Oct 28 21:01:02 proxy01 fcron[27042]: Job [ -x /bin/run-parts ] && run-parts --report /etc/cron.hourly completed
Oct 28 21:10:25 proxy01 fcron[28266]: Job [ -x /bin/run-parts ] && run-parts --report /etc/anacron.hourly started for user root (pid 28267)
Oct 28 21:11:17 proxy01 fcron[28266]: Job [ -x /bin/run-parts ] && run-parts --report /etc/anacron.hourly completed
Oct 28 21:55:00 proxy01 fcron[665]: Job halt started for user root (pid 666)
Oct 28 21:55:00 proxy01 init: Switching to runlevel: 0
Oct 28 21:55:02 proxy01 fcron[665]: Job halt completed
Oct 28 21:55:05 proxy01 ntpd[5654]: ntpd exiting on signal 15
Oct 28 21:55:05 proxy01 fcron[6329]: SIGTERM signal received
Oct 28 21:55:05 proxy01 syslog-ng[2917]: Termination requested via signal, terminating;
Oct 28 21:55:05 proxy01 syslog-ng[2917]: syslog-ng shutting down; version='2.0.10'
Oct 28 21:55:05 proxy01 sshd[5252]: Received signal 15; terminating.
Nov  9 10:46:40 proxy01 kernel: [    0.000000] Linux version 2.6.32.25-57.e40.i586 (root@buildmaster.office) (gcc version 4.1.2 20070626 (Endian 4.1.2-14)) #1
 SMP Thu Nov 11 10:01:30 EST 2010
Nov  9 10:46:40 proxy01 kernel: [    0.000000] KERNEL supported cpus:
Nov  9 10:46:40 proxy01 kernel: [    0.000000]   Intel GenuineIntel
Nov  9 10:46:40 proxy01 kernel: [    0.000000]   AMD AuthenticAMD


I have ran all cron scripts manually but wasn't able to reproduce the problem, and there is nothing scheduled to run at that time.

I've attached both crontab and messages files to this message.

As I have customized some programs in order to work well with my AD domain, I am resisting to install the server from scratch.

Help!

JT

[mrkroket]

It seems a cron job, but if  you already searched it ...

It has the VMWare tools installed?
Did you check the host to see if something is sending some logout command?
Did you have a scheduled backup at this time?

[thaobn20]

SHELL=/bin/bash
PATH=/sbin:/bin:/usr/sbin:/usr/bin
MAILTO=thaobn20@gmail.com
HOME=/

#
&nolog */1 * * * *      [ -x /bin/run-parts ] && run-parts --report /etc/cron.minutely
&nolog */5 * * * *      [ -x /bin/run-parts ] && run-parts --report /etc/cron.cyclic
01  * * * *     [ -x /bin/run-parts ] && run-parts --report /etc/cron.hourly
#05  * * * * /sbin/shutdown -r now
#Auto shutdown daily
00  17 * * * /sbin/shutdown -hf 120
#Auto shutdown on Saturday
00  11 * * 6 /sbin/shutdown -hf 120
#Auto Shutdown Sunday
00  8 * * 0 /sbin/shutdown now
#00  17 * * *   [ -x /bin/run-parts ] && run-parts --report /etc/daily.sh
47  2 * * 0     [ -x /bin/run-parts ] && run-parts --report /etc/cron.weekly
52  3 1 * *     [ -x /bin/run-parts ] && run-parts --report /etc/cron.monthly

#
@nolog 5        [ -x /bin/run-parts ] && run-parts --report /etc/anacron.cyclic
@ 1h    [ -x /bin/run-parts ] && run-parts --report /etc/anacron.hourly
@ 1d    [ -x /bin/run-parts ] && run-parts --report /etc/anacron.daily
@ 1w    [ -x /bin/run-parts ] && run-parts --report /etc/anacron.weekly
@ 1m    [ -x /bin/run-parts ] && run-parts --report /etc/anacron.monthly

# Summarize ip accounting info:
2 1 * * *       /usr/sbin/ipacsum -r -H `/bin/hostname` -t "the day 2 days ago" >/dev/null
3 1 * * 0       /usr/sbin/ipacsum -r -H `/bin/hostname` -t "the week 4 weeks ago" >/dev/null
4 1 1 2 *       /usr/sbin/ipacsum -r -H `/bin/hostname` -t "the year 2 years ago" >/dev/null

this's file crontap my server used

shutdown daily