Re: Only root is able to login

2004-08-05 Thread Matthew Seaman
On Thu, Aug 05, 2004 at 10:20:18AM +0200, Thomas Krause wrote:
 Hello,
 I've a big problem, that only root is able to login to a new FreeBSD 5.2.1
 box. Neither login nor su works. I've no local access to the machine.
 A ftp-login is possible for normal users.

For the sake of the archives, I will point out:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/faq/admin.html#SU-WHEEL-GROUP

which is the usual cause of this sort of thing, but apparently not in
this case.
 
 mdm-online:/ # su - abc
 su: /bin/sh: Permission denied
 
 mdm-online:/ # login abc
 Password:
 Copyright (c) 1992-2004 The FreeBSD Project.
 Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
 The Regents of the University of California. All rights reserved.
 
 FreeBSD 5.2.1-RELEASE-p9 (MDM-ONLINE) #1: Mon Jul 26 22:24:58 CEST 2004
 
 Welcome to FreeBSD!
 
 login: /bin/sh: No such file or directory

At a guess: both login(1) and su(1) are meant to be SUID programs:

% ls -la /usr/bin/su /usr/bin/login
-r-sr-xr-x  1 root  wheel  21824 Jun  6 14:29 /usr/bin/login*
-r-sr-xr-x  1 root  wheel   8200 Jun  6 14:29 /usr/bin/su*

They won't work without that SUID bit.  Sounds to me as if someone has
been a bit heavy handed trying to lock down the system.  Or else the
system was installed by copying from somewhere else, but using a
method which automatically drops SUID and similar bits.

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK


pgpa2JE3LYrUS.pgp
Description: PGP signature


Re: Only root is able to login

2004-08-05 Thread Byung-Hee H.
Hi,

Thu, Aug 05, 2004 at 10:20:18AM +0200
Thomas Krause [EMAIL PROTECTED] wrote:

 Hello,
 I've a big problem, that only root is able to login to a new FreeBSD 5.2.1
 box. Neither login nor su works. I've no local access to the machine.
 A ftp-login is possible for normal users.
 
 mdm-online:/ # su - abc
 su: /bin/sh: Permission denied
 
 mdm-online:/ # login abc
 Password:
 Copyright (c) 1992-2004 The FreeBSD Project.
 Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
 The Regents of the University of California. All rights reserved.
 
 FreeBSD 5.2.1-RELEASE-p9 (MDM-ONLINE) #1: Mon Jul 26 22:24:58 CEST 2004
 
 Welcome to FreeBSD!
 
 login: /bin/sh: No such file or directory
 
 mdm-online:/ # ls -l /bin/sh
 -r-xr-xr-x  1 root  wheel  753872 Jul 26 10:18 /bin/sh
 mdm-online:/ # pw usershow abc
 abc:*:1003:1003::0:0:User :/home/abc:/bin/sh
 mdm-online:/ # ls -ld /home/abc
 drwxr-xr-x  2 abc  abc  512 Aug  5 09:33 /home/abc
 mdm-online:/ # ls -la /home/abc
 total 20
 drwxr-xr-x  2 abc   abc512 Aug  5 09:33 .
 drwxr-xr-x  7 root  wheel  512 Aug  5 09:34 ..
 -rw-r--r--  1 abc   abc767 Aug  5 09:33 .cshrc
 -rw-r--r--  1 abc   abc248 Aug  5 09:33 .login
 -rw-r--r--  1 abc   abc158 Aug  5 09:33 .login_conf
 -rw---  1 abc   abc373 Aug  5 09:33 .mail_aliases
 -rw-r--r--  1 abc   abc331 Aug  5 09:33 .mailrc
 -rw-r--r--  1 abc   abc797 Aug  5 09:33 .profile
 -rw---  1 abc   abc276 Aug  5 09:33 .rhosts
 -rw-r--r--  1 abc   abc975 Aug  5 09:33 .shrc
 
 I've not modified any login* file in /etc
 
 I've no idea what's the reason, also as it worked before.
 Any hints would be greatful.
 
 Regards,
 Thomas.
 

Reference to MERGEMASTER(8).

Cheer up!
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Only root is able to login

2004-08-05 Thread Byung-Hee H.
Hi,

Thu, Aug 05, 2004 at 10:20:18AM +0200
Thomas Krause [EMAIL PROTECTED] wrote:

 Hello,
 I've a big problem, that only root is able to login to a new FreeBSD 5.2.1
 box. Neither login nor su works. I've no local access to the machine.
 A ftp-login is possible for normal users.
 
 mdm-online:/ # su - abc
 su: /bin/sh: Permission denied
 
 mdm-online:/ # login abc
 Password:
 Copyright (c) 1992-2004 The FreeBSD Project.
 Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
 The Regents of the University of California. All rights reserved.
 
 FreeBSD 5.2.1-RELEASE-p9 (MDM-ONLINE) #1: Mon Jul 26 22:24:58 CEST 2004
 
 Welcome to FreeBSD!
 
 login: /bin/sh: No such file or directory
 
 mdm-online:/ # ls -l /bin/sh
 -r-xr-xr-x  1 root  wheel  753872 Jul 26 10:18 /bin/sh
 mdm-online:/ # pw usershow abc
 abc:*:1003:1003::0:0:User :/home/abc:/bin/sh
 mdm-online:/ # ls -ld /home/abc
 drwxr-xr-x  2 abc  abc  512 Aug  5 09:33 /home/abc
 mdm-online:/ # ls -la /home/abc
 total 20
 drwxr-xr-x  2 abc   abc512 Aug  5 09:33 .
 drwxr-xr-x  7 root  wheel  512 Aug  5 09:34 ..
 -rw-r--r--  1 abc   abc767 Aug  5 09:33 .cshrc
 -rw-r--r--  1 abc   abc248 Aug  5 09:33 .login
 -rw-r--r--  1 abc   abc158 Aug  5 09:33 .login_conf
 -rw---  1 abc   abc373 Aug  5 09:33 .mail_aliases
 -rw-r--r--  1 abc   abc331 Aug  5 09:33 .mailrc
 -rw-r--r--  1 abc   abc797 Aug  5 09:33 .profile
 -rw---  1 abc   abc276 Aug  5 09:33 .rhosts
 -rw-r--r--  1 abc   abc975 Aug  5 09:33 .shrc
 
 I've not modified any login* file in /etc
 
 I've no idea what's the reason, also as it worked before.
 Any hints would be greatful.
 
 Regards,
 Thomas.
 To unsubscribe, send any mail to [EMAIL PROTECTED]

Reference to MERGEMASTER(8).

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Only root is able to login

2004-08-05 Thread Gary Mulder
Is root's shell /bin/sh? If not, then something is wrong with /bin/sh.
You should have another shell available to do some comparison testing (eg. 
/bin/csh). Use vipw  to change the abc user's shell to say /bin/csh.

Can you now login as abc? If so, then something is wrong with /bin/sh. If 
not, then it implies that the problem is not specifically with /bin/sh.

Assume you can login as abc using /bin/csh. Try simply running /bin/sh. 
Does it work? If not, then again /bin/sh is broke somehow, replace it with 
/bin/sh from another identical system (I run 4.10, sorry...)

Gary
--
Gary Mulder   mailto:[EMAIL PROTECTED]
Info Tech, Inc.
5700 SW 34th Street, Suite 1235 Phone: (352) 381-4400
Gainesville, FL 32608 Fax: (352) 381-
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]