Redhat Linux 9 cannot log in as root on console

msweeden · 08-18-2009, 06:46 PM

I have a system running Redhat Linux 9 on an i386 platform running as a server which has been in operation for about 4 years. For some reason after all this time, I can suddenly no longer log in as root on the console. I can log in as another user and "su" to root, but I did not use to have to do this. I should point out that the company that supplies the application software in use on this machine did have a tech working on it, and I presume a setting got changed along the line that I would like to reverse.

John VV · 08-18-2009, 09:41 PM

seeing as the support for RH9 ended in 2003 ( yes there was an extended update services for a lot of $$$) .There have been NO SECURITY UPDATES in 6 years .
Just a guess ... it is a zombie and has been hacked .root is know owned by a hacker .

Wim Sturkenboom · 08-18-2009, 11:38 PM

@John VV
Will that explain that one can still use su to become root?

John VV · 08-19-2009, 12:25 AM

Quote:

Will that explain that one can still use su to become root?

no, but it is a possibility . seeing as it is running 6 to 8 year old ,nonupdated,insecure code.
it could be just an xserver error
seeing as no error has been posted we can only guess .

Quote:

application software in use on this machine did have a tech working on it,

what could a tech do on such old and unsupported software ?
there is nothing to update .

chrism01 · 08-19-2009, 01:13 AM

Check the settings for /etc/securetty; table 4.1 http://www.redhat.com/docs/manuals/l...rivileges.html

msweeden · 08-19-2009, 05:49 AM

The server is in a doctor's office and runs medical office software, which is regularly updated. /etc/securetty looks correct and unchanged since 2003. I can login directly as root via the network (ssh), so it does seem that securetty would be the place to look, but tty1 through tty6 are all in there. Thanks for the suggestion!

lleb · 08-19-2009, 11:21 PM

Quote:

Originally Posted by msweeden

I have a system running Redhat Linux 9 on an i386 platform running as a server which has been in operation for about 4 years. For some reason after all this time, I can suddenly no longer log in as root on the console. I can log in as another user and "su" to root, but I did not use to have to do this. I should point out that the company that supplies the application software in use on this machine did have a tech working on it, and I presume a setting got changed along the line that I would like to reverse.

i forget how to change that setting in RH, but it is a much more secure and standard mode of running Linux in most cases. just makes it a tad more difficult to crack is all. now not only does the cracker have to know a user name and p/w, then hey can try to crack the root p/w.