BTW - 1. Should have added RH7.2.... 2. A new clue, the highest UID I can change to is 3590!?!?! 3. Sorry for having to hide the real names/numbers. <SNIP from Ed Wilts> On the server, look in /var/log/secure and /var/log/messages and see what it tells you. </SNIP> Ed: I'm a step ahead of you /var/log/messages: Dec 10 14:27:48 host PAM-warn[8757]: service: sshd [on terminal: NODEVssh] Dec 10 14:27:48 host PAM-warn[8757]: user: (uid=0) -> examp03 [remote: ?nobody@xxxxxxxx] Dec 10 14:27:48 host sshd(pam_unix)[8757]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=10.1.1.1 user=examp03 Dec 10 14:28:03 host PAM-warn[8757]: service: sshd [on terminal: NODEVssh] Dec 10 14:28:03 host PAM-warn[8757]: user: (uid=0) -> examp03 [remote: ?nobody@xxxxxxxx] Dec 10 14:28:03 host sshd(pam_unix)[8757]: session opened for user examp03 by (uid=0) Dec 10 14:28:03 host sshd(pam_unix)[8757]: session closed for user examp03 /var/log/secure: Dec 10 13:45:11 host sshd[5955]: Accepted password for examp03 from 10.1.1.1 port 34105 Dec 10 13:45:11 host sshd[5955]: Disconnecting: Command terminated on signal 25. -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list