Login issue

[bchinnat]

Hi,

We have HP BL680 blade server which contains rhel 5.1. while connecting from the server physically(console)the following issue I am facing:

If login with the correct user/name password it is suddenly vanish and asking for login again, If I give wrong password then it is giving password incorrect.
Because of this we are not able to login to console for any trouble shooting.

I am expecting your valuable inputs.


Thanks,
Bala.

[Steven E. Protter · Accepted solution]

Shalom Bala,

You will need to check the /var/log/messages file on the server you are connecting to. See /var/log/secure

I think however a reset of the iLo card is in order here. Also check that the firmware is up to date.

SEP

[bullz]

Dude,

Buy a brand new servers, not seconds :)
Ok joks apart.

explain more about your console part, are you trying to connect it via web console from blade (or) it's a direct console access with putty of that ILO IPaddress?

If it's a new build and if you can reboot well, do that see.

Guess root FS might be full, you might have already doubted this :) as we all from the same bucket :P

Else, you may need to upgrade a firmware as suggested above.

:) mail me once you resolve this.

Good luck

[bchinnat]

Thanks for the reply..

In /var/log/messages I am not finding any error but in /var/log/secure the below PAM error I am able to see exactly while I am loggin....

Jul 21 17:50:12 junldb02 login: PAM unable to dlopen(/lib/security/pam_limits.so)
Jul 21 17:50:12 junldb02 login: PAM [error: /lib/security/pam_limits.so: wrong ELF class: ELFCLASS32]
Jul 21 17:50:12 junldb02 login: PAM adding faulty module: /lib/security/pam_limits.so
Jul 21 17:50:16 junldb02 login: pam_unix(login:session): session opened for user root by LOGIN(uid=0)
Jul 21 17:50:16 junldb02 login: Module is unknown
Jul 21 17:50:19 junldb02 login: PAM unable to dlopen(/lib/security/pam_limits.so)
Jul 21 17:50:19 junldb02 login: PAM [error: /lib/security/pam_limits.so: wrong ELF class: ELFCLASS32]
Jul 21 17:50:19 junldb02 login: PAM adding faulty module: /lib/security/pam_limits.so
Jul 21 17:50:21 junldb02 login: pam_tally(login:account): option deny=3 allowed in auth phase only
Jul 21 17:50:21 junldb02 login: pam_tally(login:account): unknown option: reset
Jul 21 17:50:21 junldb02 login: pam_unix(login:session): session opened for user opssup by LOGIN(uid=0)
Jul 21 17:50:21 junldb02 login: Module is unknown


Thanks,
Bala.

[Wilfred Chau_1]

Are you running 64bit rhel?

Is the pam package also 64bit?

[bchinnat]

We have 64-bit rhel...

[bchinnat]

Any help on this.

[FLQ]

Hi Bala,

are you able to login at the console at least once or does it kick you out before you login?

According to the log files, you seem to have libs problems in PAM.

I would double check the PAM config files for typos.

Let us know.

[Huc_1]

At this time I do not have HP BL680 blade server which contains rhel 5.1 to check this on
but on a x86_64 GNU/Linux I find the following

# rpm -qla pam | grep pam_limits.so
/lib64/security/pam_limits.so

Not
/lib/security/pam_limits.so

Enjoy life.

Jean-Pierre Huc

[bchinnat]

No I am not able to login once, it suddenly disappear and asking for login again.

[bchinnat]

I am getting both file
[root@junldb02 log]# rpm -qla pam | grep pam_limits.so
/lib64/security/pam_limits.so
/lib/security/pam_limits.so

[FLQ]

Hi Bala,

can you post your pam config?

[bchinnat]

Now I am able to login, Below changes I had done. I remove the below two entires from the file /etc/pam.d/login.

session required /lib/security/$ISA/pam_limits.so

session required /lib/security/pam_limits.so

Please can any one explain me what is the purpose of above two lines in this login file.

[Huc_1]

A little l long to explain best is to read

http://www.faqs.org/docs/securing/chap5sec44.html

have a read man limits.conf

and look in your file /etc/security/limits.conf
to see if some tailoring has been added/modified (maybe its commented by editor ? ... good practice that !)

also a sometime revealing.

# ls -l /etc/security/limits.con*
and a
# stat /etc/security/limits.con*

Hope the above gets you rolling.

enjoy life.

Jean-Pierre Huc

[FLQ]

Hi Bala,

Here is the link the should help you understand the purpose of pam_limits

http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/sag-pam_limits.html

Here, another link for pam config

http://aplawrence.com/Basics/understandingpam.html

The variable $ISA is there to take care of the architecture type of your machine. 32-bit or 64-bit

Link: http://www.enterprisenetworkingplanet.com/netsecur/article.php/3514511

Check if you have the file

/lib64/security/pam_limits.so

and change/add the line in your pam config file.

Try to login afterwards.

[bchinnat]

Thanks to every one for your time on this request..