Red Hat Linux logon issue

trailmaster · 10-21-2014, 08:23 AM

After a shutdown of system, (push button
powering off) users can't logged back in says they have reached limit on attempts. How do I fix it and what causes it.

netnix99 · 10-21-2014, 08:48 AM

In my experience, if it is limits on attempts, it is a pam issue, and it happens based on the way you have pam set up to monitor & failed logins. To check:

Code:

pam_tally2 -u username

If the user has exceeded the number of failed login attempts as configured in PAM, they will not be allowed to login. You can correct this with:

Code:

pam_tally2 -u username --reset

However, if will be well worth your time to find out WHY users have to many failed logins. Do you have someone trying to compromise your system(s)? Do you have an insider trying to login as other users to do damage that gets blamed on someone else? It will happen from time to time to everyone, but if you are having this issue with all users across your project, I would do some HEAVY investigation!!!

TB0ne · 10-21-2014, 08:52 AM

Quote:

Originally Posted by trailmaster

After a shutdown of system, (push button powering off) users can't logged back in says they have reached limit on attempts. How do I fix it and what causes it.

If you are truly describing what you did (that is, shutdown the system by just powering it off), that may be the cause right there. There is a reason you use the shutdown command, and not just power-cycle the box...that reason is that things could get corrupted. Did you get any fsck warnings upon reboot? Did you fix them?

More importantly, you say you're using Red Hat...but don't tell us WHICH Red Hat you're using. If it's Red Hat Enterprise, have you contacted Red Hat support? You are PAYING FOR RHEL, right????

trailmaster · 10-21-2014, 09:07 AM

Sorry, should have given more info, Had a power outage while users that are getting the message were logged on. 2.6.32-431.29.2.X86-64 GNU/Linux \

DavidMcCann · 10-21-2014, 10:27 AM

Are there any people who were not logged on at the time of the power failure? If so, can they still log in? If they can't, there might be corruption of /etc/passwd or /etc/shadow.

John VV · 10-21-2014, 02:49 PM

ok the story changed
from press the power button
( unknown if it was a <1 sec. press or a 5 second FORCE OFF press )

to now a power outage

remove the left over .pid lock files for those users

red hat tech support will be able to go into details on your set up
but they should be in the users /tmp/?????? folder

Quote:

2.6.32-431.29.2.X86-64 GNU/Linux

that is the kernel version and NOT the operating system version

a question ?
Did you read any of the redhat documentation ?
https://access.redhat.com/documentat...erprise_Linux/

and to find out YOUR version you read the output of this

Code:

cat /etc/redhat-release