topic Re: Login issue in Operating System - Linux

Login issue

bchinnat — Wed, 21 Jul 2010 14:29:51 GMT

Hi,

We have HP BL680 blade server which contains rhel 5.1. while connecting from the server physically(console)the following issue I am facing:

If login with the correct user/name password it is suddenly vanish and asking for login again, If I give wrong password then it is giving password incorrect.
Because of this we are not able to login to console for any trouble shooting.

I am expecting your valuable inputs.

Thanks,
Bala.

Re: Login issue

Steven E. Protter — Wed, 21 Jul 2010 14:46:43 GMT

Shalom Bala,

You will need to check the /var/log/messages file on the server you are connecting to. See /var/log/secure

I think however a reset of the iLo card is in order here. Also check that the firmware is up to date.

SEP

Re: Login issue

bullz — Wed, 21 Jul 2010 15:02:03 GMT

Dude,

Buy a brand new servers, not seconds :)
Ok joks apart.

explain more about your console part, are you trying to connect it via web console from blade (or) it's a direct console access with putty of that ILO IPaddress?

If it's a new build and if you can reboot well, do that see.

Guess root FS might be full, you might have already doubted this :) as we all from the same bucket :P

Else, you may need to upgrade a firmware as suggested above.

:) mail me once you resolve this.

Good luck

Re: Login issue

bchinnat — Wed, 21 Jul 2010 16:11:53 GMT

Thanks for the reply..

In /var/log/messages I am not finding any error but in /var/log/secure the below PAM error I am able to see exactly while I am loggin....

Jul 21 17:50:12 junldb02 login: PAM unable to dlopen(/lib/security/pam_limits.so)
Jul 21 17:50:12 junldb02 login: PAM [error: /lib/security/pam_limits.so: wrong ELF class: ELFCLASS32]
Jul 21 17:50:12 junldb02 login: PAM adding faulty module: /lib/security/pam_limits.so
Jul 21 17:50:16 junldb02 login: pam_unix(login:session): session opened for user root by LOGIN(uid=0)
Jul 21 17:50:16 junldb02 login: Module is unknown
Jul 21 17:50:19 junldb02 login: PAM unable to dlopen(/lib/security/pam_limits.so)
Jul 21 17:50:19 junldb02 login: PAM [error: /lib/security/pam_limits.so: wrong ELF class: ELFCLASS32]
Jul 21 17:50:19 junldb02 login: PAM adding faulty module: /lib/security/pam_limits.so
Jul 21 17:50:21 junldb02 login: pam_tally(login:account): option deny=3 allowed in auth phase only
Jul 21 17:50:21 junldb02 login: pam_tally(login:account): unknown option: reset
Jul 21 17:50:21 junldb02 login: pam_unix(login:session): session opened for user opssup by LOGIN(uid=0)
Jul 21 17:50:21 junldb02 login: Module is unknown

Thanks,
Bala.

Re: Login issue

Wilfred Chau_1 — Wed, 21 Jul 2010 21:10:09 GMT

Are you running 64bit rhel?

Is the pam package also 64bit?

Re: Login issue

bchinnat — Wed, 21 Jul 2010 21:45:50 GMT

We have 64-bit rhel...

Re: Login issue

bchinnat — Thu, 22 Jul 2010 07:31:05 GMT

Any help on this.

Re: Login issue

FLQ — Thu, 22 Jul 2010 09:30:43 GMT

Hi Bala,

are you able to login at the console at least once or does it kick you out before you login?

According to the log files, you seem to have libs problems in PAM.

I would double check the PAM config files for typos.

Let us know.

Re: Login issue

Huc_1 — Thu, 22 Jul 2010 10:33:59 GMT

At this time I do not have HP BL680 blade server which contains rhel 5.1 to check this on
but on a x86_64 GNU/Linux I find the following

# rpm -qla pam | grep pam_limits.so
/lib64/security/pam_limits.so

Not
/lib/security/pam_limits.so

Enjoy life.

Jean-Pierre Huc

Re: Login issue

bchinnat — Thu, 22 Jul 2010 15:47:07 GMT

No I am not able to login once, it suddenly disappear and asking for login again.

Re: Login issue

bchinnat — Thu, 22 Jul 2010 15:48:44 GMT

I am getting both file
[root@junldb02 log]# rpm -qla pam | grep pam_limits.so
/lib64/security/pam_limits.so
/lib/security/pam_limits.so

Re: Login issue

FLQ — Fri, 23 Jul 2010 07:01:42 GMT

Hi Bala,

can you post your pam config?

Re: Login issue

bchinnat — Fri, 23 Jul 2010 09:18:16 GMT

Now I am able to login, Below changes I had done. I remove the below two entires from the file /etc/pam.d/login.

session required /lib/security/$ISA/pam_limits.so

session required /lib/security/pam_limits.so

Please can any one explain me what is the purpose of above two lines in this login file.

Re: Login issue

Huc_1 — Fri, 23 Jul 2010 10:53:13 GMT

A little l long to explain best is to read

http://www.faqs.org/docs/securing/chap5sec44.html

have a read man limits.conf

and look in your file /etc/security/limits.conf
to see if some tailoring has been added/modified (maybe its commented by editor ? ... good practice that !)

also a sometime revealing.

# ls -l /etc/security/limits.con*
and a
# stat /etc/security/limits.con*

Hope the above gets you rolling.

enjoy life.

Jean-Pierre Huc

Re: Login issue

FLQ — Fri, 23 Jul 2010 10:54:18 GMT

Hi Bala,

Here is the link the should help you understand the purpose of pam_limits

http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/sag-pam_limits.html

Here, another link for pam config

http://aplawrence.com/Basics/understandingpam.html

The variable $ISA is there to take care of the architecture type of your machine. 32-bit or 64-bit

Link: http://www.enterprisenetworkingplanet.com/netsecur/article.php/3514511

Check if you have the file

/lib64/security/pam_limits.so

and change/add the line in your pam config file.

Try to login afterwards.

Re: Login issue

bchinnat — Mon, 26 Jul 2010 10:31:01 GMT

Thanks to every one for your time on this request..