passwd - useradd issues


 
Thread Tools Search this Thread
Top Forums UNIX for Dummies Questions & Answers passwd - useradd issues
# 8  
Old 10-03-2011
Quote:
let me show you what I got
you have messages.log , tail that one
# 9  
Old 10-03-2011
Quote:
Originally Posted by ieth0
you have messages.log , tail that one
I only get this


Code:
ct  3 16:42:15 Trex syslog-ng[2333]: Error opening file for writing; filename='/var/log/messages', error='Is a directory (21)'
Oct  3 16:42:15 Trex syslog-ng[2333]: Error opening file for writing; filename='/var/log/messages', error='Is a directory (21)'
Oct  3 16:42:15 Trex syslog-ng[2333]: Error opening file for writing; filename='/var/log/messages', error='Is a directory (21)'
Oct  3 16:42:15 Trex syslog-ng[2333]: Error opening file for writing; filename='/var/log/messages', error='Is a directory (21)'
Oct  3 16:42:15 Trex syslog-ng[2333]: Error opening file for writing; filename='/var/log/messages', error='Is a directory (21)'

# 10  
Old 10-03-2011
this shows your box has some other problems too, paste this code in your box then wait for any errors
Code:
mv /var/log/messages /var/log/messages-bk
touch /var/log/messages
chmod 600 /var/log/messages
tail -f /var/log/messages

# 11  
Old 10-04-2011
Quote:
Originally Posted by ieth0
this shows your box has some other problems too, paste this code in your box then wait for any errors
Code:
mv /var/log/messages /var/log/messages-bk
touch /var/log/messages
chmod 600 /var/log/messages
tail -f /var/log/messages

it's done tail -f messages has not reported any output

thanks a lot

---------- Post updated 10-04-11 at 02:02 AM ---------- Previous update was 10-03-11 at 07:31 PM ----------

Quote:
Originally Posted by ieth0
... it may you have rootkit finder installed on the system ? ...
I was reading this for a similar problem is spanish but it says about a rootkit

Warning: cannot create backup file `/etc/passwd.old': Operación no permitida - ForoSUSE

I run rkhunter 1.3.8 since chkrootkit 0.47-1.71 was not able to run for this error

Code:
chkrootkit: can't find `netstat'

I am adding the rkhunter log

I found 2 more system with the same issue for passwd and useradd
so seeing the rkhunter log I have basically 3 questions

Does it look like a rootkit thing?
Second
Do you think someone might be able to not install those binaries?
Third
is there a way to find which other binaries-commands are these system missing? and if it a good idea to copy passwd - useradd from another system?

thanks a lot guys
# 12  
Old 10-04-2011
Quote:
is there a way to find which other binaries-commands are these system missing?
Which version of SLED, SLES or OpenSUSE are you talking about?
# 13  
Old 10-04-2011
Quote:
Does it look like a rootkit thing?
as i previously said your box may be rootkited
Quote:
Do you think someone might be able to not install those binaries?
what you mean?
Quote:
is there a way to find which other binaries-commands are these system missing? and if it a good idea to copy passwd - useradd from another system?
you need to have another box with clean install your current OS on it , then list all /bin /usr/sbin /sbin /usr/local/bin /usr/local/sbin paths , and check and verify the existence of the binaries on your main box.
# 14  
Old 10-04-2011
my linux us Suse 11 SP1 x64

I meant since I've found 3 servers with the same issue if maybe someone did not install these passwd-useradd binaries....

---------- Post updated at 11:02 AM ---------- Previous update was at 10:27 AM ----------

what about my last question....

In order to fix this can I copy these binaries from another running system?

thanks a lot
 
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. HP-UX

Useradd and passwd in HP-UX

Dear All, I have Perl Script which previously running on solaris and now our system is moved to HP UX. The script is creating the users on unix and database. 1. When we are creating the new user, useradd keep newly created account in locked state 2. In script we were using Passwd... (5 Replies)
Discussion started by: yadavricky
5 Replies

2. AIX

When did AIX start using /etc/security/passwd instead of /etc/passwd to store encrypted passwords?

Does anyone know when AIX started using /etc/security/passwd instead of /etc/passwd to store encrypted passwords? (1 Reply)
Discussion started by: Anne Neville
1 Replies

3. Red Hat

useradd w/o write permission on /etc/passwd

Hi root user creates a user using the useradd command. This command creates an entry in the /etc/passwd file. /etc/passwd file has rw permission for the root user. Now, if I happen to remove the w permission for the root user, useradd command still is successfully creating entry in the... (3 Replies)
Discussion started by: guruprasadpr
3 Replies

4. Solaris

useradd

I want to creat a 27 logins in solaris.Can anyone tell me how to write a script for that so that i create at a time for all 27 people. Thanks to guide me. (6 Replies)
Discussion started by: kkalyan
6 Replies

5. Solaris

passwd cmd reenables passwd aging in shadow entry

Hi Folks, I have Solaris 10, latest release. We have passwd aging set in /etc/defalut/passwd. I have an account that passwd should never expire. Acheived by emptying associated users shadow file entries for passwd aging. When I reset the users passwd using passwd command, it re enables... (3 Replies)
Discussion started by: BG_JrAdmin
3 Replies

6. UNIX for Advanced & Expert Users

useradd?

Hi Experts, when using useradd command, what are the necessary options/arguments to be included? Please advice. (4 Replies)
Discussion started by: etcpasswd
4 Replies

7. Shell Programming and Scripting

useradd

Gurus, I need to add a user to all the machines. I need a script to do this. I did one but it does not allow me to su to root within a ssh session i open. It exists saying su: Sorry. Please let me know how i can do it. I do not have the freedom of using sudo either. Regards (4 Replies)
Discussion started by: earlysame55
4 Replies

8. Solaris

useradd

Hi, I need to add a new user who will only be able to access one single folder on my Solaris 9 system. Can this be achieved by using just useradd or do i need to fiddle with auth_attr table? TIA, Selma (4 Replies)
Discussion started by: Selma
4 Replies

9. UNIX for Advanced & Expert Users

useradd

Hi. due to some needs i gave a user the premission to use useradd command with sudo. i want to know if there is a way to let him set the initial password, without giving him the premission to use passwd command as root (sudo). maybe a way to set a default password for all the new users that... (2 Replies)
Discussion started by: dorilevy
2 Replies

10. UNIX for Dummies Questions & Answers

useradd

I work on some hp ux 11.00 Servers. i have to add an user. i use the useradd command like follows: useradd -u 72022 -g 71095 -c " comment " -d /PACKAGE_NAME/home/username -s /usr/bin/sh username The command returns with error 3. The manpage means value number 3: Invalid argument supplied to an... (6 Replies)
Discussion started by: ortsvorsteher
6 Replies
Login or Register to Ask a Question