Thanks Daniel, I don't think I have made any specific change on PAM.
I did a rpm -V on pam, pam-32bit, pam-modules, pam-modules-32bit, yast2-pam and yast2 all but one reporting no discrepancy. pam-modules reports S.5....T c /etc/security/pam_pwcheck.conf but this file has only one uncommented line: password: minlen=6 no_obscure_checks cracklib nullok Nothing obvious to me. Besides, the problem seems to go away after a clean iptables flush and restarting firewall. Not sure if it is a configuration problem. Peter -----Original Message----- From: Gomez, Daniel [mailto:[EMAIL PROTECTED] Sent: 13 November 2006 17:48 To: [email protected] Subject: RE: [opensuse] SLES 10 x86_64 - Permissions on password database too restrictive This output is a function of PAM, so ensure your pam configurations is still good. -----Original Message----- From: Chiu, PCM (Peter) [mailto:[EMAIL PROTECTED] Sent: Monday, November 13, 2006 11:00 AM To: [email protected]; [email protected] Cc: Chiu, PCM (Peter) Subject: [opensuse] SLES 10 x86_64 - Permissions on password database too restrictive Hi all, On a couple of our servers running SUSE Linux Enterprise Server 10 (x86_64), we have encountered some intermittent problems when users try to log on using ssh and failed: ssh [EMAIL PROTECTED] Password: xxxxxx Permissions on the password database may be too restrictive. The machine has firewall enabled, but it appears that certain updates (quite likely from YOU) have been applied and the firewall has been reset. As a result no one can log on over the network using ssh. Restarting firewall (by invokine /etc/init.d/SuSEfirewall2_init and SuSEfirewall2_setup restart alone) will NOT reactivate the service. Access is only restored after flushing the firewall and restarting it. Has anyone come across the same problem? Any pointers here? Peter --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
