Hello ! Don't understand your problem quite right. There was a new user appearing, or was it one user of the already signed-in users ??? If a fresh new user appeared just so, your linux-box obviously then is rooted and you can install anything new. For to make your linux-box unrootable (by others), chattr -i <password-files> and chattr -i <shadow-files> as root at least. Instead of install anything new, you maybe could unplug the modem-plugin. A new safe long password. chattr -i then the files. And then you should check your files if they had been changed . . . e.g. with tool chkrootkit available on sourceforge.net or by hand check each file with a microscope . . . If this mail is not the correct answer, then trash it . . . Regards. A Beginner . . . not a guru . . . Am Mittwoch, 23. Januar 2002 12:39 schrieben Sie: > Hello Gurus, > > I'm new on this list, Actully i'm a network engineer in one ISP. > > Yesterday i faced one problem regarding radius authentication. > My radius server is running on cobalu linux. > > Yesterday all of sudden my one dialup user was not able to authenticate > thru radius. while checking thru ./radlogin username password command . > In responce i was getting tha user is already logged on radius system one > time. But while checking on modem banks it was not showin user on also user > was not in my calls table. In short the user was not actually logged in > thru dialup but was getting shown online on radius server. This was a > problem with one specific user only. > All other users were able to use dialup services properly . > the account information for this user is also same as other users. > To solve this problem temporary i just increased no of loginlimit in my > database. > > Pl guide me properly . > waiting for reply > > regards nisu > > > > > ------------------------------------------------------------ > Hot After Christmas DEALS on just about everything! > http://www.smartshop.com/cgi-bin/main.cgi?ssa=4099 > ------------------------------------------------------------------------ > To unsubscribe email security-discuss-request@linuxsecurity.com > with "unsubscribe" in the subject of the message. ------------------------------------------------------------------------ To unsubscribe email security-discuss-request@linuxsecurity.com with "unsubscribe" in the subject of the message.