RE: High UID user can not login

From: Stamper, Steve (sstamper_at_foremost.com)
Date: 12/10/04

  • Next message: James Harrison: "Re: CROND[5451]: LAuS error - meaning???"
    To: "'General Red Hat Linux discussion list'" <redhat-list@redhat.com>
    Date: Fri, 10 Dec 2004 10:48:27 -0500
    
    

    BTW - 1. Should have added RH7.2....
          2. A new clue, the highest UID I can change to is 3590!?!?!
          3. Sorry for having to hide the real names/numbers.

    <SNIP from Ed Wilts>
    On the server, look in /var/log/secure and /var/log/messages and see what it
    tells you.
    </SNIP>

    Ed: I'm a step ahead of you

    /var/log/messages:
      Dec 10 14:27:48 host PAM-warn[8757]: service: sshd [on terminal: NODEVssh]
      Dec 10 14:27:48 host PAM-warn[8757]: user: (uid=0) -> examp03 [remote:
    ?nobody@10.1.1.1]
      Dec 10 14:27:48 host sshd(pam_unix)[8757]: authentication failure;
    logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=10.1.1.1 user=examp03
      Dec 10 14:28:03 host PAM-warn[8757]: service: sshd [on terminal: NODEVssh]
      Dec 10 14:28:03 host PAM-warn[8757]: user: (uid=0) -> examp03 [remote:
    ?nobody@10.1.1.1]
      Dec 10 14:28:03 host sshd(pam_unix)[8757]: session opened for user examp03
    by (uid=0)
      Dec 10 14:28:03 host sshd(pam_unix)[8757]: session closed for user examp03

    /var/log/secure:
      Dec 10 13:45:11 host sshd[5955]: Accepted password for examp03 from
    10.1.1.1 port 34105
      Dec 10 13:45:11 host sshd[5955]: Disconnecting: Command terminated on
    signal 25.

    -- 
    redhat-list mailing list
    unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
    https://www.redhat.com/mailman/listinfo/redhat-list
    

  • Next message: James Harrison: "Re: CROND[5451]: LAuS error - meaning???"

    Relevant Pages

    • Re: Periodic Crontabs
      ... is -security, btw). ... a simple google search for 'port 16001' does wonders. ... To unsubscribe, ...
      (freebsd-current)
    • Re: printer sharing via home network with Win7, WinXP, & Vista
      ... BTW, the Win7 computername is XPS9000, where XPS has nothing to do with OS ... Attempting to apply the same steps with the Vista laptop fails. ... printer name, right click, properties, Ports, Add Port, Local Port. ...
      (microsoft.public.windows.vista.networking_sharing)
    • Re: a couple of oopses with 2.6.14
      ... ATA: abnormal status 0x7F on port 0xE407 ... I can't test if sata works, ... Btw, the printk timing information seem to be uninitalized, is this by ...
      (Linux-Kernel)
    • Re: Good auth.log analyzer?
      ... I was wondering why they did not log the passwords used ... BTW, I solved the problem in another way, I moved the SSH port from 22 ... password protect his own backdoor:) I just killed all the services on ... No more problems from that IP;) BTW, ...
      (alt.os.linux)
    • Re: siisch1: Error while READ LOG EXT
      ... BTW, something I forgot to cover in my reply: ... the output (e.g. "Timeout on slot NN") has nothing to do with "port ... Taken from my post at that time, which is what I'm wanting to relay ...
      (freebsd-stable)