topic Re: root login at console not possible in Operating System - HP-UX

root login at console not possible

Rainer von Bongartz — Wed, 14 Dec 2005 08:56:14 GMT

Problem is: root cannot login at console
login falling back to new login prompt without further message

GenericSysName [HP Release B.11.11]
Console Login: root
Password:

GenericSysName [HP Release B.11.11]
Console Login: root
Password:

enabling pam debug thru syslogd, the debug shows:

PAM: load_modules: /usr/lib/security/libpam_unix.1
PAM: pam_get_username(ux)
load_function: successful load of pam_sm_acct_mgmt
PAM: pam_mapping_in_use()
PAM: pam_get_username(ux)
PAM: pam_mapping_in_use()
PAM: pam_acct_mgmt: error General Commercial Security error

What is a General Commercial Security error ??

login using ssh is possible.

Regards
Rainer

Re: root login at console not possible

Luk Vandenbussche — Wed, 14 Dec 2005 09:24:10 GMT

Rainer,

Is it only on the console or also through a telnet login?

Re: root login at console not possible

Rainer von Bongartz — Wed, 14 Dec 2005 09:26:06 GMT

Luk,

it's only on console. telnet is disabled, but ssh tru putty is no problem

Regards
rainer

Re: root login at console not possible

Robert-Jan Goossens — Wed, 14 Dec 2005 09:29:26 GMT

Hi Rainer,

Does the file /etc/securetty exist ?
---
On a trusted system, login allows superuser to log in on the console unless /etc/securetty exists and does not contain console.
---

Best regards,
Robert-Jan

Re: root login at console not possible

baiju_3 — Wed, 14 Dec 2005 09:36:25 GMT

Hi ,

Check your /etc/securetty settings .It should have an entry "console" in it.

thx,
bl.

Re: root login at console not possible

Rainer von Bongartz — Wed, 14 Dec 2005 09:45:14 GMT

Hi Robert-Jan,

/etc/securetty does not exist.

I also found out that NO login is possible at console, even for non-root users

Regards
Rainer

Re: root login at console not possible

baiju_3 — Wed, 14 Dec 2005 09:52:00 GMT

create /etc/security with following permissions and add console in that .

adedd05p:root [/tempbkp/copy_area/adedd13n.11.11-bkp] ll /etc/securetty
-rw-r--r-- 1 root sys 8 Sep 18 2001 /etc/securetty

Re: root login at console not possible

baiju_3 — Wed, 14 Dec 2005 09:52:21 GMT

create /etc/security with following permissions and add console in that .

ll /etc/securetty
-rw-r--r-- 1 root sys 8 Sep 18 2001 /etc/securetty

Re: root login at console not possible

baiju_3 — Wed, 14 Dec 2005 09:52:38 GMT

create /etc/securetty with following permissions and add console in that .

ll /etc/securetty
-rw-r--r-- 1 root sys 8 Sep 18 2001 /etc/securetty

Re: root login at console not possible

Rainer von Bongartz — Wed, 14 Dec 2005 09:56:42 GMT

etc/security does not change the behaviour

Rainer

Re: root login at console not possible

john korterman — Wed, 14 Dec 2005 10:01:35 GMT

Hi Rainer,

just guessing - and it may not be the cause - but is this line:

console:t_devname=console:t_maxtries#777:chkent:
tty:t_devname=tty:chkent:

included in /tcb/files/ttys ?

regards,
John K.

Re: root login at console not possible

john korterman — Wed, 14 Dec 2005 10:04:10 GMT

Sorry, I meant this line:

console:t_devname=console:t_maxtries#777:chkent:

Regards,
John K.

Re: root login at console not possible

Rainer von Bongartz — Wed, 14 Dec 2005 10:07:44 GMT

Hi John,

Bingo, /tcb/files/ttys did not exist on this box.

I copied from another server an login at console is possible

Thanks and Regards
Rainer