From: [EMAIL PROTECTED] on behalf of Fernando Laudares Camargos
Sent: Wed 08/02/2006 08:19
To: Fernando Laudares Camargos
Cc: [email protected]
Subject: [Oscar-devel] Re: [Oscar-users] Mandriva 2006 status report - openssh "bug" identified
Fernando Laudares Camargos a écrit :
> 2) The problem with
*openssh* newer than 3.6 (as 3.9 in Mandrake 10.1
> and 4.2 in Mandriva
2006) is that the user 'oscartst' have his ssh
> access 'locked' by
default. I have not completed my study at this
> question yet, but the
solution I used was manually unlock the user (in
> all nodes) with the
command 'passwd -u oscartst -f'.
Well, I guess I was wrong here.
Actually, that works, but this is probably not the right way to do it.
When
the cluster is installed, the /etc/shadow file show the following line for the
user oscartst:
oscartst:!!:13186:0:99999:7:::
Another regular
user, "laudares" (myself), has this line in the same
file.
laudares:$1$Jck9.vTD$8sKdM32ytVh7svBv9OYfi/:13186:0:99999:7:::
The
difference between the two is that the "field" for the password is filled by
"!!" for oscartst and by "$1$Jck9.vTD$8sKdM32ytVh7svBv9OYfi/" for
laudares.
When I try to connect from the server to the node and back with
the user laudares, it works (with that I mean `It does not ask for my passwd`),
but not when I try that with oscartst.
If I change the password of
oscartst with the command "passwd oscartst", its line in the shadow file is
replaced by one similar to that of laudares, and ssh (without password) works.
But then I have to do this with all nodes, or have this line changed in the
image, before to spread it across the cluster.
I would like to hear your
comments about that, since it`s one of the main problems we`re having with
Mandriva after the 10.0 version.
Thanks,
--
Fernando Laudares
Camargos
Révolution Linux
http://www.revolutionlinux.com
---------------------------------------
*
Tout opinion et prise de position exprimée dans ce message est celle de son
auteur et pas nécessairement celle de Révolution Linux.
** Any views and
opinion presented in this e-mail are solely those of the author and do not
necessarily represent those of Révolution
Linux.
-------------------------------------------------------
This
SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for
problems? Stop! Download the new AJAX search engine that
makes
searching your log files as easy as surfing the web.
DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=k&kid3432&bid#0486&dat1642
_______________________________________________
Oscar-devel
mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/oscar-devel
