Suse 11

I created a scanR user to run McAfee in a Linux server and put it in admin group. But scanning as scanR keeps on failing with below errors. I'd like to know what causes the errors and how to make it run.

Thanks in advance.

Nov 8 00:00:11 []: Connection closed by 123.45.678.90
Nov 8 00:00:11 []: Did not receive identification string from 123.45.678.90
Nov 8 00:00:23 []: linuxshield: Unknown symbol getHookModuleInterface
Nov 8 00:01:09 []: Did not receive identification string from 123.45.678.90
Nov 8 00:01:53 []: Did not receive identification string from 123.45.678.90
Nov 8 00:01:53 []: error: PAM: Authentication failure for scanR from rapid.com
Nov 8 00:01:53 []: Received disconnect from 123.45.678.90: 3: com.jcraft.jsch.JSchException: Auth cancel
Nov 8 00:01:54 []: Did not receive identification string from 123.45.678.90
Nov 8 00:01:54 []: Invalid user admin from 123.45.678.90
Nov 8 00:01:54 []: input_userauth_request: invalid user admin
Nov 8 00:01:54 []: Failed none for invalid user admin from 123.45.678.90 port ssh2
Nov 8 00:01:54 []: Postponed keyboard-interactive for invalid user admin from 123.45.678.90 port ssh2
Nov 8 00:01:54 []: Did not receive identification string from 123.45.678.90
Nov 8 00:01:54 []: Invalid user admin from 123.45.678.90
Nov 8 00:01:54 []: input_userauth_request: invalid user admin
Nov 8 00:01:54 []: Failed none for invalid user admin from 123.45.678.90 port ssh2
Nov 8 00:01:54 []: Postponed keyboard-interactive for invalid user admin from 123.45.678.90 port ssh2
Nov 8 00:01:54 []: Did not receive identification string from 123.45.678.90
Nov 8 00:01:54 []: Invalid user guest from 123.45.678.90
Nov 8 00:01:54 []: input_userauth_request: invalid user guest
Nov 8 00:01:54 []: Failed none for invalid user guest from 123.45.678.90 port ssh2
Nov 8 00:01:54 []: Postponed keyboard-interactive for invalid user guest from 123.45.678.90 port ssh2
Nov 8 00:01:54 []: Did not receive identification string from 123.45.678.90
Nov 8 00:01:54 []: User root from rapid.com not allowed because none of user's groups are listed in AllowGroups
Nov 8 00:01:54 []: input_userauth_request: invalid user root
Nov 8 00:01:54 []: Failed none for invalid user root from 123.45.678.90 port ssh2
Nov 8 00:01:54 []: Postponed keyboard-interactive for invalid user root from 123.45.678.90 port ssh2

funny numbers, these 123.45.678.90
what are they?

1 members found this post helpful.

At first I thought it was an IP, but 678???
Maybe that's the hostname?

1 members found this post helpful.

Yes. It's an IP address. I changed the IP to anonymous. Sorry for the confusion.

Since there are several different error messages I don't know what causes the failure of scanning.
Thank you for taking time to reply this posting.

Connection closed by 123.45.678.90
Nov 8 00:00:11 []: Did not receive identification string from 123.45.678.90
Nov 8 00:00:23 []: linuxshield: Unknown symbol getHookModuleInterface

Nov 8 00:01:53 []: Did not receive identification string from 123.45.678.90

Nov 8 00:01:53 []: error: PAM: Authentication failure for scanR from rapid.com
Nov 8 00:01:53 []: Received disconnect from 123.45.678.90: 3: com.jcraft.jsch.JSchException: Auth cancel

Nov 8 00:01:54 []: Invalid user admin from 123.45.678.90

There is an error that says,
"sshd[xxxxx}:error: PAM: Authentication failure for scanR from rapid.com."

1. Is this failure generated because the user scanR is not specified in /etc/ssh/sshd_config file as AllowUser?
I am thinking this could be one of the reasons the error is generated.

2. I don't see AllowUser in sshd_config file. Can I add AllowUser parameter at the end of the file and add scanR to allow ssh login? Does it make a difference?

Thank you,