Re: System crash

here is my /var/log/audit.log file

type=USER_LOGIN msg=audit(1267133127.780:27472): user pid=3414 uid=0
auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023
msg='uid=0: exe="/usr/libexec/gdm-session-worker" hostname=? addr=?
terminal=/dev/tty7 res=failed'
type=USER_AUTH msg=audit(1267133152.918:27473): user pid=3427 uid=0
auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023
msg='op=PAM:authentication acct="c4ifford"
exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0
res=success'
type=USER_ACCT msg=audit(1267133152.919:27474): user pid=3427 uid=0
auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023
msg='op=PAM:accounting acct="c4ifford" exe="/usr/libexec/gdm-session-worker"
hostname=? addr=? terminal=:0 res=success'
type=CRED_ACQ msg=audit(1267133152.922:27475): user pid=3427 uid=0
auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023
msg='op=PAM:setcred acct="c4ifford" exe="/usr/libexec/gdm-session-worker"
hostname=? addr=? terminal=:0 res=success'
type=LOGIN msg=audit(1267133152.922:27476): login pid=3427 uid=0 old
auid=4294967295 new auid=500 old ses=4294967295 new ses=16
type=USER_ROLE_CHANGE msg=audit(1267133152.939:27477): user pid=3427 uid=0
auid=500 ses=16 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam:
default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023:
exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=?
res=success'
type=USER_START msg=audit(1267133152.955:27478): user pid=3427 uid=0
auid=500 ses=16 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023
msg='op=PAM:session_open acct="c4ifford"
exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0
res=success'
type=USER_LOGIN msg=audit(1267133152.955:27479): user pid=3427 uid=0
auid=500 ses=16 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500:
exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty7
res=success'

On Thu, Feb 25, 2010 at 4:29 PM, cliff here <c4ifford@xxxxxxxxx> wrote:

another thing to note... logging in as root in the gdm doesn't make any
entry to /var/log/secure.. whereas my basic user id does


On Thu, Feb 25, 2010 at 4:27 PM, cliff here <c4ifford@xxxxxxxxx> wrote:

Sorry, I'm trying to collect as much info as I can to bring this box back
up.. here is what I am seeing

Feb 25 15:37:01 DBC115B useradd[3034]: failed adding user 'gdm', data
deleted
Feb 25 15:52:06 DBC115B useradd[3071]: failed adding user 'gdm', data
deleted
Feb 25 15:52:33 DBC115B pam: gdm-password[3000]:
pam_unix(gdm-password:session): session opened for user c4ifford by (uid=0)


So to surmise the problem.. i can ssh and virt tty into the box.. but I
cannot log in through gdm. so no X.


On Thu, Feb 25, 2010 at 4:09 PM, Stainforth, Matthew (SD/DS) <
Matthew.Stainforth@xxxxxx> wrote:

The problem is "it broke" and "can't login" and "i get errors in my
secure log" and "I'm pretty sure it's pam" are awfully vague and don't
convey much information.

Exactly what behavior and errors are you seeing? If you want help,
you'll have to be specific.

-----Original Message-----
From: redhat-list-bounces@xxxxxxxxxx [mailto:
redhat-list-bounces@xxxxxxxxxx] On Behalf Of cliff here
Sent: Thursday, February 25, 2010 5:00 PM
To: General Red Hat Linux discussion list
Subject: Re: System crash

So I reinstalled and reupdated.. and it broke again... I'm so stumped

On Thu, Feb 25, 2010 at 10:34 AM, cliff here <c4ifford@xxxxxxxxx> wrote:

Not sure, I checked login, and xserver pam modules and they looked like
the
standard ones.


On Thu, Feb 25, 2010 at 10:29 AM, <m.roth@xxxxxxxxx> wrote:

When i say tty i mean virtual tty as in ALT+f1,f2 etc... but I
cannot
login through X, I checked the xserver pam module in /etc/pam.d

Mind you that X comes up fine, loads my dual monitor kmod driver. So
when
I do try and log into x, i get errors in my secure log, which points
me
to
the Pam authentication issue. I tried to roll back and complete the
update.. but to no avail

OH! You didn't make this clear before - *now* I understand why you
were
insisting it was pam.

Lessee, if you get a chance at some point, did pam have keyboard
authentication ok'd?

mark

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list




--


-------------------------------------------------------------------------------------------------------------------------------------
NOTICE: This message, including all attachments, is intended for the
use of
the individual or entity to which it is addressed and may contain
information that is privileged, confidential and exempt from disclosure
under applicable law. If the reader of this message is not the intended
recipient, or the employee or agent responsible for delivering this
message
to its intended recipient, you are hereby notified that any
dissemination,
distribution or copying of this communication is strictly prohibited.
If you
have received this communication in error, please notify the sender
immediately by replying "Received in error" and immediately delete this
message and all its attachments.


-------------------------------------------------------------------------------------------------------------------------------------




--

-------------------------------------------------------------------------------------------------------------------------------------
NOTICE: This message, including all attachments, is intended for the use
of
the individual or entity to which it is addressed and may contain
information that is privileged, confidential and exempt from disclosure
under applicable law. If the reader of this message is not the intended
recipient, or the employee or agent responsible for delivering this
message
to its intended recipient, you are hereby notified that any
dissemination,
distribution or copying of this communication is strictly prohibited. If
you
have received this communication in error, please notify the sender
immediately by replying "Received in error" and immediately delete this
message and all its attachments.

-------------------------------------------------------------------------------------------------------------------------------------
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list




--

-------------------------------------------------------------------------------------------------------------------------------------
NOTICE: This message, including all attachments, is intended for the use
of the individual or entity to which it is addressed and may contain
information that is privileged, confidential and exempt from disclosure
under applicable law. If the reader of this message is not the intended
recipient, or the employee or agent responsible for delivering this message
to its intended recipient, you are hereby notified that any dissemination,
distribution or copying of this communication is strictly prohibited. If you
have received this communication in error, please notify the sender
immediately by replying "Received in error" and immediately delete this
message and all its attachments.

-------------------------------------------------------------------------------------------------------------------------------------




--

-------------------------------------------------------------------------------------------------------------------------------------
NOTICE: This message, including all attachments, is intended for the use of
the individual or entity to which it is addressed and may contain
information that is privileged, confidential and exempt from disclosure
under applicable law. If the reader of this message is not the intended
recipient, or the employee or agent responsible for delivering this message
to its intended recipient, you are hereby notified that any dissemination,
distribution or copying of this communication is strictly prohibited. If you
have received this communication in error, please notify the sender
immediately by replying "Received in error" and immediately delete this
message and all its attachments.

-------------------------------------------------------------------------------------------------------------------------------------




--
-------------------------------------------------------------------------------------------------------------------------------------
NOTICE: This message, including all attachments, is intended for the use of
the individual or entity to which it is addressed and may contain
information that is privileged, confidential and exempt from disclosure
under applicable law. If the reader of this message is not the intended
recipient, or the employee or agent responsible for delivering this message
to its intended recipient, you are hereby notified that any dissemination,
distribution or copying of this communication is strictly prohibited. If you
have received this communication in error, please notify the sender
immediately by replying "Received in error" and immediately delete this
message and all its attachments.
-------------------------------------------------------------------------------------------------------------------------------------
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

Relevant Pages

  • Re: Backup solutions for Linux servers
    ... This message, including all attachments, is intended for the use ... recipient, or the employee or agent responsible for delivering this message ... distribution or copying of this communication is strictly prohibited. ...
    (RedHat)
  • Re: System crash
    ... recipient, or the employee or agent responsible for delivering this ... This message, including all attachments, is intended for the use ... distribution or copying of this communication is strictly prohibited. ...
    (RedHat)
  • Re: System crash
    ... log" and "I'm pretty sure it's pam" are awfully vague and don't convey much ... message and all its attachments. ... recipient, or the employee or agent responsible for delivering this message ... distribution or copying of this communication is strictly prohibited. ...
    (RedHat)
  • Re: System crash
    ... immediately by replying "Received in error" and immediately delete ... to its intended recipient, you are hereby notified that any ... distribution or copying of this communication is strictly prohibited. ... message and all its attachments. ...
    (RedHat)
  • Re: Custom RHEL5.4 ISO
    ... "google" how to create a custom RHEL or CENTOS Linux ISO. ... This message, including all attachments, is intended for the use ... distribution or copying of this communication is strictly prohibited. ... recipient, or the employee or agent responsible for delivering this message ...
    (RedHat)