solaris 10 caching credentials? Inactivated users allowed in via ssh

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Brian,

 	Is the nscd caching the query ? I guess try restarting nscd and 
see if that fixes your problem, if you aren't running nscd this is a 
useless suggession.

 	Cheers,

 	Aly.

On Tue, 30 Aug 2005, Brian K. Jones wrote:

> Hi all,
>
> I'm running FDS (binary rpm) on rhel4. I have rhel4 and solaris 10 clients.
>
> If I inactivate a user account in the FDS admin GUI, then try to log in via
> ssh as that inactivated user on any ol' random Linux client, the BIND
> operation fails with err=53 (unwilling to perform). This, I should think, is
> the expected behaviour.
>
> Solaris 10, on the other hand, lets the user in (again, ssh). The only BIND I
> can correllate in the logs come from the solaris proxy user. Then a search is
> done for "shadowaccount=<username>", and then a search is done for the group
> memberships of that user (presumably I'm already in when this is done).
> There's never a BIND operation as the inactive user at all!
>
> Can someone explain what's happening?
>
> brian.
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>

-- 
Aly S.P Dharshi
aly.dharshi at telus.net

 	 "A good speech is like a good dress
 	  that's short enough to be interesting
 	  and long enough to cover the subject"




[Index of Archives]     [Fedora User Discussion]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora News]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora QA]     [Fedora Triage]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Yosemite Photos]     [Linux Apps]     [Maemo Users]     [Gnome Users]     [KDE Users]     [Fedora Tools]     [Fedora Art]     [Fedora Docs]     [Maemo Users]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Fedora ARM]

  Powered by Linux