I'm not sure where the best place to post this, but everyone here are
great help so hopefully someone can tell me what might have happened..
I have a UPS, but it only has two outlets and I needed three, so I put
an unused power strip on it and plugged in my three devices. Apparently
one of my cats went snooping around back there and stepped on the
switch, turning off the power. I flipped it back on and my server came
up with no problem, but my workstation had some issues with manually
fsck'ing the drive, apparently mainly because it was sending a mail the
instant the power went out as the files in lost+found were an email and
spool information.
Anyway, after that was done I couldn't login! Every time I tried, I got
something like this:
login: mylogin
passwd:
29.93049234 920348294 00000000
3042304300
login failed
Three different accounts did it, but root would login fine. I created a
new account to see if shadow was munged, same problem. Logs show:
Aug 12 05:00:57 psi login: FAILED LOGIN 1 FROM (null) FOR mylogin,
Authentication failure
I checked tripwire, all looked okay, rpm verify looked okay, so it
doesn't appear that I was hacked (and the server is fine too, and they'd
have to go through it) so I decided to ftp install pam, rebooted and it
was fine! I don't know if pam was corrupted, or if it was coicidence..
Anyone have any idea what happened?
--
Walter Francis
http://theblackmoor.net Powered by Red Hat Linux 6.x