UNIX for Advanced & Expert Users

Hi,

I modified file /etc/pam.d/system-auth, to include "dcredit=-1 lcredit=-1 ucredit=-1"

Now no one can login in. I still have an open session...but I cant even su to another account.

I restored the file to the original, but still, no one can login in!

Any help very appreciated!


I get these messages in /etc/log/secure

Dec 2 13:17:54 xxxx xinetd[4716]: START: pblocald pid=6930 from=x.x.x.x
Dec 2 13:18:06 xxxx sshd[6933]: Accepted password for xxxx from ::ffff:x.x.x.x port 2317 ssh2
Dec 2 13:18:06 xxxx sshd[6933]: fatal: PAM: pam_open_session(): Permission denied

You have a couple of choices

boot from cdrom - mount the / filesystem manually, make changes

boot to runlevel 1 - and if you can get in as root, make changes.

Thanks, but like I said, I still have an open session. I just need to know what needs to be done to fix this.

I have already restored the file, but still, no one can login in. I have even replaced the file from an equivelent system via scp (which is still working), but that did not work either. So, it is not the file itself that is munged.

Thanks!

---------- Post updated 12-03-10 at 11:29 AM ---------- Previous update was 12-02-10 at 04:35 PM ----------

Another internal admin figured this out. Hope this helps someone else.

Doing a "su - user" (were user is some system account) also produces the error as I mentioned.

So, "strace su - user" actually points directly to the issue.

open("/var/log/lastlog", O_RDWR) = -1 EFBIG (File too large)

Looking at /var/log/lastlog shows the reported file size to big for the filesystem. It's a sparse file. lol. Sweet. Nuke it, touch it. Viola. Working again.

T.