Re: solaris 10 caching credentials? Inactivated users allowed in via ssh

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Brian,

Is the nscd caching the query ? I guess try restarting nscd and see if that fixes your problem, if you aren't running nscd this is a useless suggession.

	Cheers,

	Aly.

On Tue, 30 Aug 2005, Brian K. Jones wrote:

Hi all,

I'm running FDS (binary rpm) on rhel4. I have rhel4 and solaris 10 clients.

If I inactivate a user account in the FDS admin GUI, then try to log in via
ssh as that inactivated user on any ol' random Linux client, the BIND
operation fails with err=53 (unwilling to perform). This, I should think, is
the expected behaviour.

Solaris 10, on the other hand, lets the user in (again, ssh). The only BIND I
can correllate in the logs come from the solaris proxy user. Then a search is
done for "shadowaccount=<username>", and then a search is done for the group
memberships of that user (presumably I'm already in when this is done).
There's never a BIND operation as the inactive user at all!

Can someone explain what's happening?

brian.

--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users


--
Aly S.P Dharshi
aly.dharshi@xxxxxxxxx

	 "A good speech is like a good dress
	  that's short enough to be interesting
	  and long enough to cover the subject"

--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users

[Index of Archives]     [Fedora Directory Users]     [Fedora Directory Devel]     [Fedora Announce]     [Fedora Legacy Announce]     [Kernel]     [Fedora Legacy]     [Share Photos]     [Fedora Desktop]     [PAM]     [Red Hat Watch]     [Red Hat Development]     [Big List of Linux Books]     [Gimp]     [Yosemite News]

  Powered by Linux