Login or Register to Ask a Question and Join Our Community


Solaris

Pam Module sending a cannot get password enry after certain period in /var/adm/messag

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Operating Systems Solaris Pam Module sending a cannot get password enry after certain period in /var/adm/messag
# 1  
Old 06-18-2009
Pam Module sending a cannot get password enry after certain period in /var/adm/messag
Pam Module sending a cannot get password enry after certain period in /var/adm/message.

pam_login_limit(auth): Cannot get Password entry for user 'dbsnmp'

What is dbsnmp? Also if account is locked does pam module checks for this locked account at regular interval and keeps on posting messages?
Why am getting these messages?
# 2  
Old 06-18-2009
i am no oracle expert so you'll have to take this with a grain of salt. I found this looking through some oracle forums:

Quote:
Yes, you want to lock this ID!

This, from the book "Oracle Forensics":

http://www.rampant-books.com/book_20..._forensics.htm

DBSNMP is the account used by Oracle's intelligent agent to logon automatically to remote servers in order to provide information for presentation via Enterprise Manager. DNSMP has the SELECT ANY DICTIONARY system privilege which can read the passwords from SYS.USER$ and enables the account to do its work for the Intelligent Agent. The problem is that an Attacker could log on to Oracle as DBSNMP especially if the default password has not been changed. The attacker could then read the password hashes from SYS.USER$.
hope this helps a bit or at least gets you on the right track.
# 3  
Old 06-21-2009
About PAM module.
Thanks,

I was out of station so could not reply back. I appreciate your efforts and time. Please update me more on this.

The /var/adm/messages is showing "Pam Module sending a cannot get password enry for username 'DBSNMP'."

So as per your post I believe it is locked and should be locked until required. I mean it should be cause of concern.

Is that right?

---------- Post updated at 02:19 PM ---------- Previous update was at 02:18 PM ----------

http://www.rampant-books.com/book_20..._forensics.htm
not working

---------- Post updated at 02:19 PM ---------- Previous update was at 02:19 PM ----------

http://www.rampant-books.com/book_20..._forensics.htm
not working
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Read-only env variable in PAM module

Hi guys, does anybody know how to set/create read-only environment variable inside PAM module? I've written my own pam authentication module and I'd need to pass some information to user application started by user after user has been logged to the system and user should not be allowed to change... (0 Replies)
Discussion started by: gonzales01
0 Replies

2. SuSE

PAM password change failed, pam error 20

Hi, I use a software which can create account on many system or application. One of resource which is managed by this soft his a server SUSE Linux Enterprise Server 10 (x86_64). patch level 3. This application which is an IBM application use ssh to launch command to create account in... (3 Replies)
Discussion started by: scabarrus
3 Replies

3. Red Hat

PAM module pam_passwdqc module

Hello friends Today i have changed my passwd policy for strong password Everything is working correctly but when i changed my password , it did not ask me my old password my /etc/pam.d/system-auth file is (only passwdqc.so module line) password required pam_passwdqc.so retry=3... (0 Replies)
Discussion started by: rink
0 Replies

4. Solaris

Difference between /var/log/syslog and /var/adm/messages

Hi, Is the contents in /var/log/syslog and /var/adm/messages are same?? Regards (3 Replies)
Discussion started by: vks47
3 Replies

5. Solaris

/var/adm & /var/sadm

what is the difference between tha /var/adm and /var/sadm files in solaris 10 Os please can any one respond quickly thanking you (2 Replies)
Discussion started by: wkbn86
2 Replies

6. Red Hat

PAM -- module key_init.so

Hello, I'm now analysing the working of PAM. PAM works with config-files, that you can find under the directory /etc/pam.d. One of those config.-files is the file: login.conf. ------------------------------------------------------------------------------------------------------ #... (0 Replies)
Discussion started by: caroline
0 Replies

7. Solaris

diff b/w /var/log/syslog and /var/adm/messages

hi sirs can u tell the difference between /var/log/syslogs and /var/adm/messages in my working place i am having two servers. in one servers messages file is empty and syslog file is going on increasing.. and in another servers message file is going on increasing but syslog file is... (2 Replies)
Discussion started by: tv.praveenkumar
2 Replies

8. Solaris

Soalris 10 PAM Radius authentication Module

Hello Group, I'm facing Problem with the configuration of "***pam_radius_auth.so.1***" module to be integrated with Freeradius and Funk Steel Belted Radius. Both this radius servers are able to make "Access-Accept" packet. But the SSH or Telnet client is not able to login to the system with the... (0 Replies)
Discussion started by: ImpeccableCode
0 Replies

9. Solaris

pam module quesion

quick question about PAM module. Here may pam.conf file. How do I verify that pam modules work correctly? Does it mean when it run cron job, it checks the pam module for authentication? Thanks in advance. # passwd auth required pam_passwd_auth.so.1 # # cron service (explicit... (0 Replies)
Discussion started by: mokkan
0 Replies

10. Solaris

Custom pam module

Does anyone know how to create a custom pam module for modifying the login authentication procedure? (1 Reply)
Discussion started by: mhm4
1 Replies
Login or Register to Ask a Question