Please help if you can think of anything. I am using Redhat 9 (up2date).

When I try to login to my pc, I get an incorrect password message. All user accounts are like this. So I boot into single user mode and reset the passwords with passwd. This seems to work for root and each user. However, I still can't login as them. So back into single user mode again. This time I try to su to a different user...no luck. su returns "su: incorrect password".

So I try booting an older kernel, same problem. Only booting from an alternate partition with the old OS (RH7.3, intact) allows me to login and use this host.

The last thing that I remember doing before this problem is setting up LDAP. I removed nss_ldap with "rpm -e nss_ldap".

Does this sound like a compromised host?

Any ideas?
David

Follow up:

I don't think I stated this in the original post, but I have the RH 9 partition mounted while booted from a RH 7.3 partition to try to trouble shoot this. I see this in my /var/log/messages:
Jun 19 16:46:57 cindy gdm[5134]: PAM unable to dlopen(/lib/security/$ISA/pam_ldap.so)

I found this link on google, it seems related, but I haven't figured it out yet:
http://www.linuxmanagers.org/piperma...er/000105.html

Thanks for any help you can offer,
David

SOLVED!

One of the LDAP FAQs had suggested using authconfig-gtk to make some LDAP config file changes. Stupid me, I just enabled everything having to do with LDAP. I had clicked on the "Authentication" tab and selected LDAP. Thus, trying to login would now always fail since no LDAP information would authenticate me.

The solution was to run authconfig and deselect LDAP as an authentication method.

David