Intruder alert.

[Jeffrey F. Goldsmith]

I am having a user problem this morning on my D380 server. HP-UX 11.i is the installed OS. This server is my test server and I haven’t used it for a couple of months. Yesterday I was trying to install a program so I could run some tests and I noticed that when I login as any other user, other than root, I get the Intruder alert when I do the whoami command.

Does anyone have any idea as to what my problem is? Thanks for the help.

[Ermin Borovac · Accepted solution]

Check permission mode on /etc/passwd (should be 444).

If permissions are OK, run /usr/sbin/pwck to check integrity of /etc/passwd file.

[TommyT]

HI

When the /etc/passwd file loses read permissions for the world. The 'whoami' command will return 'Intruder alert'.

//Tommy

[Kent Ostby]

Also check ownership of /etc/password and permissions on /etc and / .

[Jeffrey F. Goldsmith]

the permissions of /etc/passwd were wrong. Changed them back to 444 and it seems to be working again. Thanks for the help everyone.