Hi all, I'm using RHEL4 as server and i'm login as root on it, so my problem is that since 1 week, adding new user is imposible and it's the same history when i'm trying to modify the users that i've created before.I don't have any idea of what's happened! there's no error message when i'm doing these operations! need your help pls.

Could explain more on the method you using to create the new user. Is it the GUI tool or the command line ?. I would also suggest you to check the imunity if the password and shadow files. You explanation of the issue does not provide actual details of the issue you facing ..better if you elaborate more.

thanx for ur reply, first i'm using GUI tool when i tryed to create the user (user management tool), but i've also tryed to use command line and it said to me :"unable to open password file". Things i'm sure is that there's another process using this file!! , then i tryed to shutdown my computer normally so that all process will be stoped well and truly but it couldn't, so i checked in etc/X11/gdm/gdm.conf to make sure that the command line which calls the shutdown process is not in comment(it was in comment and i reactivate it),then i check inside /sbin and usr/sbin, surprise! there's no shutdown , reboot, restart, poweroff command file anymore, disappeared!

So in another way, i can't add an user, i can't modify them, and i can't shutdown or restart my computer normally.

I think that this explanation could satisfy you mether, but if need more pls feel free to ask me cos i need your help!

Hello Vinci.

It seems the system is bad shape. I would really suggest you to check it for any intrusion. Regarding adding a user you can try the manual method . I know its tedious but current situation need it. I would like to see the output of below commands :

#lsattr /etc/passwd

#ls -l /etc/passwd

#ls -l /usr/sbin/adduser /usr/sbin/useradd

Also do you have SeLinux enabled on this system. For adding a use manually you need to first modify the passwd file, then shadow, /etc/group. Then create a home dir under /home and change its Owner/Group to username. Copy files from /etc/skel ( all are .?? files ).

Hi mether,

This are the cmd line output:
---------------------------------------------------------------------------
[root@intranet ~]# lsattr /etc/passwd
-bash: lsattr: command not found
[root@intranet ~]# ls -l /etc/passwd
-rw-r--r-- 1 root root 4628 jan 16 07:34 /etc/passwd
[root@intranet ~]# ls -l /usr/sbin/adduser
lrwxrwxrwx 1 root root 7 avr 6 2006 /usr/sbin/adduser -> useradd
[root@intranet ~]# ls -l /usr/sbin/useradd
-rwxr-xr-x 1 root root 57532 nov 24 2004 /usr/sbin/useradd
[root@intranet ~]# [root@intranet ~]# lsattr /etc/passwd
---------------------------------------------------------------------------

I don't have any idea if SELinux is enable on the system or not

other info: i can't modify my rights with passwd and shadow files, I don't know why?

and when i go to /sbin, the files with the # sing is filled in red, it don't get what does it mean?:

[root@intranet sbin]# ls

adsl-start ifcfg #pam_timestamp_check
blockdev ipppstats #pwdb_chkpwd
getkey mount.smb #unix_chkpwd
grub-terminfo #netreport vgscan


I think that my server was burned by a hacker or sthing like that...i've already ran avast on it but nothing! thanx for the tips of the manual user creation but i think it's not the best solution for me, it's better to proceed with a new install cos time is money! anyway u can post ur help or other tips this is very helpfull for me.


B.Regards,

Vinci

to know whether Selinux is enabled or not run the getenforce command.
If it says that Enforcing, then edit the /etc/sysconfig/selinux file and disable it.

If you think SELinux is causing problems then act on the cause instead of the symptoms. Look for SELinux warnings in syslog and audit.log, run them through audit2allow, review and set up your local policy. If unsure if it's SELinux post warning messages you think are related (between BB code tags) here.