I just came back from my vacation and can't seem to login to one of my redhat servers. I am getting the following error message when I try to login:
bash-2.05# ssh -l simran hostname simran@hostname's password: Read from remote host hostname: Connection reset by peer Connection to hostname closed. bash-2.05#
I was able to login without any issues before leaving. None of my user accounts seem to be working. I am unable to look at the logs at the moment since I don't have a cdrom attached and can't break root. I will probably have that later tonight, but for now is there anything I can do to gain access to this system? Could this system have been hacked and if so, what would be the best way to confirm. I will check my logs to see who logged in the last 4 day period, since I was on vacation and no body else logs into this box. Any suggestions or comments would be greatly appreciated.
I will probably re-build this box but would like to know if it is really needed. This server is mainly running bind 9.2.2 and apache 2.0.
Thanks in advance, -- Simran H. redhat@xxxxxxxxxxxx www.chamkila.org
-- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list
