Topic: Locked out! and solved!

[pvansoest]

I'm not sure why but suddenly I'm unable to login.
Not from console, not from ssh (putty)

I've reset the password for root and admin in kernel-smp single.
No change. I still can login via server-manager.

Reading the logs shows that there is something with de pam_ldap module but the LDAP service is active.

--------------------------------------------------------------------------------
Jun  6 08:44:41 super e-smith[3272]: gmake[1]: Entering directory /var/yp/abc.nl'
Jun  6 08:44:41 super e-smith[3272]: gmake[1]: *** No rule to make target /etc/shadow', needed by passwd.byname'.  Stop.
Jun  6 08:44:41 super e-smith[3272]: gmake[1]: Leaving directory /var/yp/abc.nl'
Jun  6 08:44:41 super e-smith[3272]: make: *** [target] Error 2
Jun  6 08:44:41 super e-smith[3272]: make: Leaving directory /var/yp'
Jun  6 08:44:41 super e-smith[3272]: Couldn't update NIS Database.
Jun  6 08:44:41 super e-smith[3272]: S95nis-update-db=action|Event|password-modify|Action|S95nis-update-db|Start|1149576281 103504|End|1149576281 132239|Elapsed|0.028735|Status|512
Jun  6 08:44:41 super e-smith[3272]: Running event handler: /etc/e-smith/events/password-modify/S96nfs-restart
Jun  6 08:44:41 super e-smith[3272]: S96nfs-restart=action|Event|password-modify|Action|S96nfs-restart|Start|1149576281 132343|End|1149576281 201569|Elapsed|0.069226
Jun  6 08:44:57 super PAM_pwdb[3288]: authentication failure; (uid=101) -> admin for pwauth service
Jun  6 08:45:20 super PAM_pwdb[3310]: authentication failure; (uid=101) -> admin for pwauth service
Jun  6 08:45:43 super sshd[3236]: Failed password for admin from 100.100.100.200 port 1358 ssh2
Jun  6 08:45:57 super sshd[3236]: pam_ldap: ldap_simple_bind Can't contact LDAP server
Jun  6 08:45:57 super sshd[3236]: Failed password for admin from 100.100.100.200 port 1358 ssh2
-----------------------------------------------------------------------------------

What can I do?

[byte]

Have you had ssh open to "world" if so I would say looking at your log snip that compile tools are installed... Please contact security@contribs.org to discuss further.

[pvansoest]

yes, ssh was open to the world but locked down to my personal domain.
I'll try your suggestion, but meanwhile, I can't do a thing about it?

[pvansoest]

If been searching around in single user mode.
Discovered that ldap.conf was pointing to a server on lan.
pointed it back to localhost and now stuff is working.

I'm investigating now if Wildfire has something to do with it.
because that needs our windows ldapserver to auth.

thanks for reading

this topic can be closed

[CharlieBrady]

Reading the logs shows that there is something with de pam_ldap module but the LDAP service is active.

pam_ldap isn't used with a standard SME server, so it's obvious you've substantially modified yours. Unless you tell people all about your modifications, they're unlikely to be able to help you.