Menu

#1481 Must reset password every day.

open
5
2004-02-13
2004-02-11
Anonymous
No

I'm running Webmin 1.1 on RedHat 9, with vsFTPd. Every
day, the system seems to forget a user's password
(there's two users: root, and another, who has FTP
access). Once I go into Webmin, Users and Groups, and
reset the password (to the same password even) this
user can FTP again, until the next morning, where I
must go through the above steps again.
Thanks, glaiacona@aikencounty.net

Discussion

  • Jamie Cameron

    Jamie Cameron - 2004-02-12

    Logged In: YES
    user_id=129364

    Sounds like the user's password expiry time is too short.
    When you edit the user, make sure all the fields under
    'Password Options' are cleared out.

     
  • Jamie Cameron

    Jamie Cameron - 2004-02-12
    • status: open --> closed
     
  • Nobody/Anonymous

    Logged In: NO

    Far from closed.
    My Expiry date is set to 28 Jan, 2005.
    So, what it sounds like isn't what it is.

     
  • Jamie Cameron

    Jamie Cameron - 2004-02-13
    • status: closed --> open
     
  • Jamie Cameron

    Jamie Cameron - 2004-02-13

    Logged In: YES
    user_id=129364

    Looks like I got the solution wrong ..
    What appears in /var/log/secure or /var/log/authlog when one
    of these locked users tries to login?

     
  • johnglynn

    johnglynn - 2006-08-29

    Logged In: YES
    user_id=1460697

    I am also having the same problem but not for all users
    only certain ones. There is nothing selected or entered in
    the password options area. Yet passwords seem to expire or
    become corrupt somehow.

    Please help:(

    I am using:
    Webmin 1.260
    Mail server: IMAP - dovecot
    PHP - 4.3.11
    Web server - Apache 2.0.53
    This is a stock installation of Redhat Fedora Core 3, which
    uses RPM.
    Web server: Raid 5 windows 2003

     
  • johnglynn

    johnglynn - 2006-08-29

    Logged In: YES
    user_id=1460697

    Additional information for my previous entry:

    This is what I founf under /var/log/secure:
    Aug 28 00:08:34 mail sshd[10775]: Failed password for
    info_rt from ::ffff:89.32.189.36 port 2720 ssh2

    I do not have /var/log/authlog log file.

    Found this under /var/log/messages:
    Aug 29 09:59:27 mail dovecot(pam_unix)[30279]:
    authentication failure; logname= uid=0 euid=0 tty= ruser=
    rhost= user=info_rt

    Hope this helps.

    Thank you,
    John Glynn

     
  • Jamie Cameron

    Jamie Cameron - 2006-08-29

    Logged In: YES
    user_id=129364

    What does the info_rt user's line in the /etc/shadow file
    contain? I suspect that some of the password expiry fields
    are set..

     
  • johnglynn

    johnglynn - 2006-08-29

    Logged In: YES
    user_id=1460697

    Hey JCAmeron,

    Thank you for the quick response. I do not have
    a /etc/shadow log file in systm logs. Is that something I
    can set up with the "Add a new system log?" link?

     
  • johnglynn

    johnglynn - 2006-08-29

    Logged In: YES
    user_id=1460697

    Additional information for my previous entry:

    I added a /etc/shadow log file but I do not think it helps
    because I did not have one setup before the problem with
    info_rt. Anyway to make it back pedal, so to speak? :)

     
  • Jamie Cameron

    Jamie Cameron - 2006-08-29

    Logged In: YES
    user_id=129364

    No, you definately don't want to log to /etc/shadow ..
    Instead, I wanted to see the output of the following command
    run as root at the shell prompt :

    grep info_rt /etc/shadow

     
  • johnglynn

    johnglynn - 2006-08-29

    Logged In: YES
    user_id=1460697

    Hey Jamie,

    Do you mean this?

    info_rt:$1$56862741
    $HOLEn4gpbfcREg/ItYA.O.:13389:0:999999:7:::

    Is that helpful?

    Thanks,
    John

     
  • Jamie Cameron

    Jamie Cameron - 2006-08-29

    Logged In: YES
    user_id=129364

    Try editing /etc/shadow, and changing the line for info_rt
    to read :

    info_rt:$1$56862741$HOLEn4gpbfcREg/ItYA.O.:::::::

     
  • johnglynn

    johnglynn - 2006-08-29

    Logged In: YES
    user_id=1460697

    Thank you for these quick responses Jamie!

    I have about dozens of accounts that are behaving this
    way. I was using info_rt as 1 example. Do I make a
    similar change to all of them (I am guessing not). I do
    not understand the change you are recommending. Any chance
    of further explanation?

    Again, thank you for your help in this.

    John

     
  • Jamie Cameron

    Jamie Cameron - 2006-08-29

    Logged In: YES
    user_id=129364

    I would recommend testing with the info_rt user first, and
    if it works making a similar change to all of them in
    /etc/shadow. This change turns off all password expiry
    settings, which myst have been the cause of your problem..

     
  • johnglynn

    johnglynn - 2006-08-29

    Logged In: YES
    user_id=1460697

    Additional information for my previous entry:

    I understand what the 0 7 and 999999 are but not the 13389
    in $1$56862741$HOLEn4gpbfcREg/ItYA.O.:13389:0:999999:7:::

     
  • Jamie Cameron

    Jamie Cameron - 2006-08-29

    Logged In: YES
    user_id=129364

    The 13389 is the date on which the password was last
    changed, in days since Jan 1st 1970.

     
  • johnglynn

    johnglynn - 2006-09-11

    Logged In: YES
    user_id=1460697

    Sorry to bother you. I just had this happen again(user's
    pasword changes "on it's own"). I checked the shadow log
    and here is what I get:

    alex:$1$58000841$GEdZANwou6hvdhN9f/lGh0:13402::::::

    This is freaking me out...

     
  • Jamie Cameron

    Jamie Cameron - 2006-09-11

    Logged In: YES
    user_id=129364

    So this 'alex' user cannot login? That shadow line shouldn't
    stop him, as there is no maximum days limit in there..

     
  • johnglynn

    johnglynn - 2006-09-11

    Logged In: YES
    user_id=1460697

    I know, and yet it said that his password failed.
    :(

     
  • Jamie Cameron

    Jamie Cameron - 2006-09-11

    Logged In: YES
    user_id=129364

    It sounds like his password got changed, rather than it
    expiring. Did he change it, perhaps using Webmin or the
    passwd command?

     
  • johnglynn

    johnglynn - 2006-09-11

    Logged In: YES
    user_id=1460697

    He swears he did not. He uses outlook and suddenly it
    failed. But if nothing else rings a bell with you then
    maybe I should give it some time and see what happens.

     
  • Jamie Cameron

    Jamie Cameron - 2006-09-11

    Logged In: YES
    user_id=129364

    I can't see how it could get magically changed like that,
    sorry..

     
  • johnglynn

    johnglynn - 2006-09-11

    Logged In: YES
    user_id=1460697

    Me neither. Thanks for your responses. I will post again
    if it happens again.

    Thanks again,
    John

     

Log in to post a comment.

Auth0 Logo