LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 01-28-2009, 03:29 PM   #1
jovercam
LQ Newbie
 
Registered: Jan 2009
Location: Belgium
Distribution: CentOS 5.2
Posts: 3

Rep: Reputation: 0
incorrect login on the console but accepted on telnet-ssh session


Hello,

I am new on this forum as I installed recently a FAN 1.1 distribution to deploy Nagios on my network.

This distribution is based on CentOs 5.2.

I managed to get a full working installation with Nagios and Centreon.

Then I decided to install OCS Inventory and GLPI on the same server. this worked also.

Then I joined the server to the AD domain, installing samba and winbind.

Everything worked fine.

This monday I found the server completely freezed and had no other choice than shutting it down. But when it restarted, I went into a lot of problems.

The first one I could not resolve is that I cannot log anymore on the console : I receive "Incorrect login" for all the valid users I know, even with root.

When I connect with PuTTY I can specify root and the password and I get logged. su accepts the other users.

Does anybody have any idea about it?


Here is my system-auth :
#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth required pam_env.so
auth sufficient pam_unix.so nullok try_first_pass
auth requisite pam_succeed_if.so uid >= 500 quiet
auth sufficient pam_winbind.so use_first_pass
auth required pam_deny.so

account required pam_unix.so broken_shadow
account sufficient pam_localuser.so
account sufficient pam_succeed_if.so uid < 500 quiet
account [default=bad success=ok user_unknown=ignore] pam_winbind.so
account required pam_permit.so

password requisite pam_cracklib.so try_first_pass retry=3
password sufficient pam_unix.so md5 shadow nullok try_first_pass use_authtok
password sufficient pam_winbind.so use_authtok
password required pam_deny.so

session optional pam_keyinit.so revoke
session required pam_limits.so
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
session required pam_unix.so
session required pam_oddjob_mkhomedir.so skel=/etc/skel/ umak=022

Thanks in advance
 
Old 01-28-2009, 05:01 PM   #2
AlucardZero
Senior Member
 
Registered: May 2006
Location: USA
Distribution: Debian
Posts: 4,824

Rep: Reputation: 615Reputation: 615Reputation: 615Reputation: 615Reputation: 615Reputation: 615
Does /etc/securetty contain "console", "tty0", or "ttyS0"?
 
Old 01-28-2009, 05:50 PM   #3
GazL
LQ Veteran
 
Registered: May 2008
Posts: 6,901

Rep: Reputation: 5025Reputation: 5025Reputation: 5025Reputation: 5025Reputation: 5025Reputation: 5025Reputation: 5025Reputation: 5025Reputation: 5025Reputation: 5025Reputation: 5025
Have you ruled out any full filesystems? Experience has taught me to always do a 'df' before getting carried away with the detail. I've seen a full rootfs cause these sorts of issues in the past.
 
Old 01-29-2009, 02:54 AM   #4
jovercam
LQ Newbie
 
Registered: Jan 2009
Location: Belgium
Distribution: CentOS 5.2
Posts: 3

Original Poster
Rep: Reputation: 0
Hello,

Here is the content of securetty : console appears but not tty0 :

[root@PCNagios etc]# cat securetty
console
vc/1
vc/2
vc/3
vc/4
vc/5
vc/6
vc/7
vc/8
vc/9
vc/10
vc/11
tty1
tty2
tty3
tty4
tty5
tty6
tty7
tty8
tty9
tty10
tty11

What concerns df :

[root@PCNagios etc]# df
Sys. de fich. 1K-blocs Occupé Disponible Capacité Monté sur
/dev/mapper/VolGroup00-LogVol00
18156292 4208868 13010260 25% /
/dev/hda1 101086 18136 77731 19% /boot
tmpfs 257744 0 257744 0% /dev/shm

[root@PCNagios etc]# df -h
Sys. de fich. Tail. Occ. Disp. %Occ. Monté sur
/dev/mapper/VolGroup00-LogVol00
18G 4,1G 13G 25% /
/dev/hda1 99M 18M 76M 19% /boot
tmpfs 252M 0 252M 0% /dev/shm


It does not seem to be a problem. But after the hard reboot, I got a lot of errors in the boot process because a lot of files were universally accessible and not taken into account by the applications.

I corrected it with chmod and now I do not get any one of these warnings.

Thank you for your help.
 
Old 01-29-2009, 11:41 AM   #5
AlucardZero
Senior Member
 
Registered: May 2006
Location: USA
Distribution: Debian
Posts: 4,824

Rep: Reputation: 615Reputation: 615Reputation: 615Reputation: 615Reputation: 615Reputation: 615
Try adding "tty0", and "ttyS0" if you are connecting via serial cable and have configured the server to output on serial.
 
Old 01-30-2009, 04:07 AM   #6
jovercam
LQ Newbie
 
Registered: Jan 2009
Location: Belgium
Distribution: CentOS 5.2
Posts: 3

Original Poster
Rep: Reputation: 0
A first class response.

I added tty0 , rebooted and got no difference. As the server is not yet in the computer room, I still use a PS2 keyboard and a screen attached to the video port and did not think that ttyS0 should be used.

Then I added ttyS0 and could log on the console.

This problem is now resolved.
 
Old 01-30-2009, 09:02 PM   #7
AlucardZero
Senior Member
 
Registered: May 2006
Location: USA
Distribution: Debian
Posts: 4,824

Rep: Reputation: 615Reputation: 615Reputation: 615Reputation: 615Reputation: 615Reputation: 615
I didn't think ttyS0 worked that way either, but glad you solved it.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
su - password not accepted; root console login fine mrclisdue Linux - Security 5 11-25-2007 05:24 PM
console formatting over telnet session mikoroz Linux - Newbie 2 11-12-2007 03:57 AM
Login Incorrect for everyone including Root at console morette Linux - General 2 07-30-2004 04:37 PM
MAN page formatting incorrect via telnet/SSH pederslie Linux - Newbie 3 12-11-2002 02:35 AM
Please help: console root login incorrect! aponcel Linux - Networking 7 07-19-2001 02:42 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 02:02 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration