Bad UID ??

[MikeL_4]

I had a user that could not log into the server with his user id which was a UID 500...

Checked the /etc/shadow file and it didn't show as locked. but I ran the usermod -U command on the ID anyway just in case I was missing something...

I then changed the password but user still couldn't log in..... Access denied when entering password.

I then did a userdel and readded with useradd and all was ok with the new UID that was created.... If I tried to change back to uid 500 they couldn't log in....

Any idea what could hag the UID ??

[Ivan Ferreira]

Maybe a problem with the owner/permissions for the home directory.

Maybe a PAM restriction.

[MikeL_4]

There has been no changes to the PAM file at all, as a matter of fact no changes to the server in several months now...

This ID that had the UID was working and today just stopped...

They enter there ID when logging in, and fails with access denied ....

I did a userdel, and re-added with a different UID and it worked, I changed the UID tothe old 500 UID and login fails again...

[Stephen P. Schaefer]

Take a look at your PAM config. My /etc/pam.d/system-auth file has

auth requisite pam_succeed_if.so uid >= 500 quiet

Were that '=' sign missing from ">= 500", I'd expect it to behave as you're describing.

[Andrew Cowan]

Try usermod and see if the password has been marked as expired e.g. usermod user -e
YYYY-MM-DD.

Also see the chage command

[MikeL_4]

account sufficient /lib/security/$ISA/pam_succeed_if.so uid < 100 quiet

I tried usermod -U user, tried usermod -e 2010-10-25 user and still can't login with the user id...

As soon as I change the UID to another unused number, I can log in with the user ID

[MikeL_4]

Looks like it was an issue with failed login attempts.... found a command: faillog, which I ran on the user ID, faillog -e user -r and I was then able to login with the user ID with UID 500....

[MikeL_4]

Thanks..