Hi Marco,
99% chance you were hacked. This is a common "feature" of a rootkit.
You will likely need to reinstall, or start looking for the files that were
replaced and reinstall the packages necessary.
You can figure out if you've been hacked by checking to see if you've
upgraded ALL of the errata items. Most notably the wu-ftpd and bind
packages.
Have fun,
--
_________________________________________________________________
Brian Ashe CTO
[EMAIL PROTECTED] Dee-Web Software Services, LLC.
http://www.dee-web.com/
-----------------------------------------------------------------
You don't have to swim faster than the shark...
You just have to swim faster than the people you're with.
Thursday, October 05, 2000, 7:36:42 AM, you wrote:
MS> system: RedHat 6.2 x86
MS> Since yesterday, in multi-user mode, I can no longer authenticate any
MS> users. All login attempts result in 'login failure'. Strangely,
MS> /var/adm/messages does not indicate any failures from PAM.
MS> In single user-mode, I have no problems su'ing from and to any user. I've
MS> 'zeroed' out root's shadow password, then rebooted, and logins still fail.
MS> I've checked to make sure all my keys work properly.
MS> Does anyone have any suggestions on how I can get back into multi-user
MS> mode? I've tried commenting out all the entries in /etc/pam.d/login (not
MS> having researched what each line does), and logins still fail.
MS> Thanks,
MS> Marco
MS> _______________________________________________
MS> Redhat-list mailing list
MS> [EMAIL PROTECTED]
MS> https://listman.redhat.com/mailman/listinfo/redhat-list
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
