Error: Unauthorized Login

[Russ Park]

Hey fellow admins,

Anyone know what to do with this? I try either direct login, su from a standard user account or su from root, ALL get the same message:

unauthorized login
Killed

It seems to start ok, shows the message of the day, then a copyright, but then bombs out with the above error. I thought it might be something in the /etc/profile, but regardless of what changes I make to that file, this still occurs. Anyone?

[Michael Steele_2]

Can you log into root?

Is your problem limited to non-system accounts other than root, daemon, lp, etc? Using NIS?

You can verify your /etc/passwd file (* if not trusted *) with 'pwck'. Use 'grpck' for /etc/group.

It sound like you're hitting the /etc/profile file ok, so you can also copy in the default an try again.

cp /usr/newconfig/etc/profile /etc/profile

'set -xv' when added to the /etc/passwd will indicate where the bombing out occurs. Put it near the top.

Any error numbers reported along with 'Error: Unauthorized Login'?

[Russ Park]

First of all, as far as I know, this is the only account with this problem. Root is ok, my account is ok, but this one is not. The text in my original message is all I get, I don't actually see the word "error" - I put the set -xv command in very near the top and I still see the following:

# su - oracle
(c)Copyright 1983-2000 Hewlett-Packard Co., All Rights Reserved.
(c)Copyright 1979, 1980, 1983, 1985-1993 The Regents of the Univ. of California
(c)Copyright 1980, 1984, 1986 Novell, Inc.
(c)Copyright 1986-1992 Sun Microsystems, Inc.
(c)Copyright 1985, 1986, 1988 Massachusetts Institute of Technology
(c)Copyright 1989-1993 The Open Software Foundation, Inc.
(c)Copyright 1986 Digital Equipment Corp.
(c)Copyright 1990 Motorola, Inc.
(c)Copyright 1990, 1991, 1992 Cornell University
(c)Copyright 1989-1991 The University of Maryland
(c)Copyright 1988 Carnegie Mellon University
(c)Copyright 1991-2000 Mentat Inc.
(c)Copyright 1996 Morning Star Technologies, Inc.
(c)Copyright 1996 Progressive Systems, Inc.
(c)Copyright 1991-2000 Isogon Corporation, All Rights Reserved.


RESTRICTED RIGHTS LEGEND
Use, duplication, or disclosure by the U.S. Government is subject to
restrictions as set forth in sub-paragraph (c)(1)(ii) of the Rights in
Technical Data and Computer Software clause in DFARS 252.227-7013.

Hewlett-Packard Company
3000 Hanover Street
Palo Alto, CA 94304 U.S.A.

Rights for non-DOD U.S. Government Departments and Agencies are as set
forth in FAR 52.227-19(c)(1,2).
*****************************************************************

INFORMATICA DEVELOPMENT

*****************************************************************

WARNING: You are now connected to SAICnet!
SAICnet is an SAIC information and data transmission, processing
and storage system for use only by SAIC authorized users.
SAIC may at any time monitor the SAICnet and access messages, data
and information transmitted, processed and/or stored in SAICnet.
As a condition of your use of SAICnet, you authorize such monitoring
and accessing of messages, data and information transmitted,
processed and/or stored in SAICnet.
unauthorized login
Killed

-Russ

[Steven E. Protter]

Just for fun, I'd delete the oracle account and then add it back in.

Make sure the .profile for that user is backed up some where.

Take a look at the .profile and any oracle configuration scripts that set values like ORACLE_SID and ORACLE_HOME for this problem.

SEP

[Radhakrishnan Venkatara]

i will first check the .profile of the user.
it is one causing problem.if u can login as other user without problems /etc/profile should be ok(unless there is any specific setting for the particular user).

please check ur .profile it does have something which is causing the problem.

radhakrishnan

[Sunil Sharma_1]

Hi,

try to loginh without user profile
su oracle
is it working if yes then devide .profile in different block and try to locate where is the problem.
Sunil

[Russ Park]

Thanks for your input everyone, but I found the culprit: /etc/csh.login. This file was put in by the previous administrator with code in it designed to control access to the account with the goal that you could only login via su and not be able to login directly.

The old code:
if ( `whoami` == oracle ) then

didn't work because it depended on the whoami command which only reports on the current session. I change the test part to:

if ( `who am i|cut -c 1-8` == oracle ) then

This works the 'who am i' reports base login.

Anyone with another solution to controlling logins please chime in. I may put up another post to ask this question.

Thanks!