Linda Knippers wrote:
I'm seeing the same thing.  My ljk account is configured like your ealuser
account is.

These 2 commands work:
#ssh -l ljk/staff_r localhost
#ssh -l ljk/sysadm_r localhost

These don't:
#ssh -l ljk/sysadm_r/SystemLow-SystemHigh localhost
#ssh -l ljk/sysadm_r/s0-s15:c0.c1023 localhost
#ssh -l ljk/sysadm_r/s0 localhost
#ssh -l ljk/sysadm_r/SystemHigh localhost

I see the same thing in /var/log/messages.  I see nothing in /var/log/secure.
This is the audit record that is generated.

type=USER_ERR msg=audit(1173476295.352:1313): user pid=10706 uid=0 auid=500
subj=system_u:system_r:sshd_t:s0-s15:c0.c1023 msg='PAM: bad_ident acct=? :
exe="/usr/sbin/sshd" (hostname=localhost.localdomain, addr=127.0.0.1,
terminal=ssh res=failed)'

Thanks for verifying Linda ..
I also see the same above audit record .. don't know why I didn't put it in my original message ... and I don't see anything in /var/log/secure either


- Loulwa

--
redhat-lspp mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/redhat-lspp

Reply via email to