Root cant login from GSP console

[Craig A. Sharp]

All of a sudden I am not able to login to root from the GSP. If I ssh into the box directly, root can login just fine.

Any ideas?

[Aussan]

Hi Craig
what prompt do you get at the GSP before you login

the first one is usually admin, then you login as root

[Craig A. Sharp]

I get past the Admin login and get to the actual console login prompt..it is at that point that root cant login.

[Patrick Wallek]

OK. So what error, if any do you get?

Does your password contain any special characters, like a ! or an @? If so, change your password to something without any special characters and see what happens.

[Craig A. Sharp]

No error and no special characters...it just keeps asking for the password. The strange thing is that if I ssh direct to the box such as ssh root@X.X.X.X, it works fine. This is only happening at the console.

[Aussan]

is this a trusted system

and did you put root restrictions
look in /etc
is there a file called securetty

if so, what's in it

[Jeff_Traigle]

Check /etc/securetty. Maybe someone munged the console entry. Should be simply a line like:

console

[Craig A. Sharp]

securtty is good and no its not a trusted system. It does use ldap but it looks at files first. Since I can login from a direct ssh session, I would expect that ldap is not a factor.

[A. Clay Stephenson]

I assume that this is a trusted system. Check to make sure that there is a console entry in /tcb/files/ttys and /tcb/files/devassign.

Is there a bogus (misspelled?) console entry in /etc/securetty?

[Craig A. Sharp]

Its not a trusted system. I have double checked the /etc/securetty file.

[Aussan]

Hi Craig
can you show us what's in the /etc/securetty please


thanks

Aussan

[Craig A. Sharp]

Sure can:

server1 # cat /etc/securetty
console
server1 #

[Aussan]

is your password over 8 characters?

and is there a tcb directory /tcb

i'm asking because if the system was converted to trusted without you knowing, then console will take the first 8 characters only

[Craig A. Sharp]

No /tcb and our password is exactly 8 characters letters and numbers.

I cant think of what else to look at.

[A. Clay Stephenson]

Can you log in as a non-root user from the console?

[Aussan]

go to /dev
do ll console

and see if another has the same meager minor number.

also what are the permissions on it?

[Craig A. Sharp]

server1 # ll console
crw--w--w- 1 root tty 0 0x000000 May 24 15:02 console
server1 #

[Aussan]

also your root filesystem is not full is it?

[Jov]

>> The strange thing is that if I ssh direct to the box such as ssh root@X.X.X.X, it works fine. This is only happening at the console.

By default SSH into the box as root is blocked. Thus some security changes has been made on your server.

Can you login the server with your account via GSP?


Jov