While doing updates on my servers, I came across this one and I'm baffled. I always ssh into my primary server and then ssh to the others. I have them all setup to use keys, and normally it just logs in and records this in syslog. However, after rpm updated openssh/openssh-clients/openssh-server to 3.1p1-8 tonight, I'm noticing something odd. When I log in, I see this in the log file:


PAM-warn[1306]: service: sshd [on terminal: NODEVssh]
PAM-warn[1306]: user: (uid=0) -> root [remote: [EMAIL PROTECTED]
sshd(pam_unix)[1306]: authentication failure; logname= uid=0 euid=0
                     tty=NODEVssh ruser= rhost=intra.pcraft.com user=root
sshd(pam_unix)[1306]: session opened for user root by (uid=0)

Notice how pam now says it failed authentication, yet it logged me in. Um, what's going on?

--
H| I haven't lost my mind; it's backed up on tape somewhere.
+--------------------------------------------------------------------
Ashley M. Kirchner <mailto:[EMAIL PROTECTED]> . 303.442.6410 x130
IT Director / SysAdmin / WebSmith . 800.441.3873 x130
Photo Craft Laboratories, Inc. . 3550 Arapahoe Ave. #6
http://www.pcraft.com ..... . . . Boulder, CO 80303, U.S.A.





-- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list

Reply via email to