Go Back   openSUSE Forums > Archives > SLS Archives > ARCHIVES - SuSE Linux > ARCHIVES - Network & Security > ARCHIVES - Security
Forums FAQ Members List Search Today's Posts Mark Forums Read


ARCHIVES - Security Want to know if you should really apply the latest kernel patch? Want to know how to configure your firewall? Discuss any Security related topics in here!

 
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 06-Sep-2007, 16:14
Bascy
Guest
 
Posts: n/a
Question

I've gotten myself deep into it this time!!

My Suse 10.2 server (text-only) is running .. but i can;t seem to login anymore :-(
I'm wondering if there is anybody that can help me ... pLEASE!


I'v been fighting with samba and getting it to work in my Windows 2003 domain for some weeks, following tutorial after tutorial from the web, but it just didnt seem to work ... It should get user--authentication from the windows server, but

I'm relatively new to Linux, so bear with me ... i don't know all the details of the things i have been doing.

Result at this point, is that the server starts, services are started, but i just can;t login anymore. I booted in Recue mode, tried disabling Samba, resetting nsswitch.conf, disabling winbind ... but it all didnt make a difference.

Can anybody direct me to how i will get the authentication on the linux system to just look at the local files, so i can login again?
  #2 (permalink)  
Old 11-Sep-2007, 03:57
Bascy
Guest
 
Posts: n/a
Default

I'v solved this .. Finally!!

It turns out that someone had broken in and changed passwords! I never thought of that because i was to busy with the things i was messing with myself :-)

I manage to correct it, by booting in rescue mode, mount the original partitoins and delete the passwords from the passwd and shadow files. Looking in /var/log/messages gave me a lot of clues about people trying to get in on sshd. Got it closed now with hosts.deny and hosts.allow
  #3 (permalink)  
Old 11-Sep-2007, 04:08
eberhard
Guest
 
Posts: n/a
Default

If someone broke into your computer via ssh, they maybe left more than just a changed password. See this thread: http://forums.suselinuxsupport.de/index.ph...st&p=243058
 

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




 

Search Engine Friendly URLs by vBSEO 3.3.0 RC2