I'm running Webmin 1.1 on RedHat 9, with vsFTPd. Every
day, the system seems to forget a user's password
(there's two users: root, and another, who has FTP
access). Once I go into Webmin, Users and Groups, and
reset the password (to the same password even) this
user can FTP again, until the next morning, where I
must go through the above steps again.
Thanks, glaiacona@aikencounty.net
Logged In: YES
user_id=129364
Sounds like the user's password expiry time is too short.
When you edit the user, make sure all the fields under
'Password Options' are cleared out.
Logged In: NO
Far from closed.
My Expiry date is set to 28 Jan, 2005.
So, what it sounds like isn't what it is.
Logged In: YES
user_id=129364
Looks like I got the solution wrong ..
What appears in /var/log/secure or /var/log/authlog when one
of these locked users tries to login?
Logged In: YES
user_id=1460697
I am also having the same problem but not for all users
only certain ones. There is nothing selected or entered in
the password options area. Yet passwords seem to expire or
become corrupt somehow.
Please help:(
I am using:
Webmin 1.260
Mail server: IMAP - dovecot
PHP - 4.3.11
Web server - Apache 2.0.53
This is a stock installation of Redhat Fedora Core 3, which
uses RPM.
Web server: Raid 5 windows 2003
Logged In: YES
user_id=1460697
Additional information for my previous entry:
This is what I founf under /var/log/secure:
Aug 28 00:08:34 mail sshd[10775]: Failed password for
info_rt from ::ffff:89.32.189.36 port 2720 ssh2
I do not have /var/log/authlog log file.
Found this under /var/log/messages:
Aug 29 09:59:27 mail dovecot(pam_unix)[30279]:
authentication failure; logname= uid=0 euid=0 tty= ruser=
rhost= user=info_rt
Hope this helps.
Thank you,
John Glynn
Logged In: YES
user_id=129364
What does the info_rt user's line in the /etc/shadow file
contain? I suspect that some of the password expiry fields
are set..
Logged In: YES
user_id=1460697
Hey JCAmeron,
Thank you for the quick response. I do not have
a /etc/shadow log file in systm logs. Is that something I
can set up with the "Add a new system log?" link?
Logged In: YES
user_id=1460697
Additional information for my previous entry:
I added a /etc/shadow log file but I do not think it helps
because I did not have one setup before the problem with
info_rt. Anyway to make it back pedal, so to speak? :)
Logged In: YES
user_id=129364
No, you definately don't want to log to /etc/shadow ..
Instead, I wanted to see the output of the following command
run as root at the shell prompt :
grep info_rt /etc/shadow
Logged In: YES
user_id=1460697
Hey Jamie,
Do you mean this?
info_rt:$1$56862741
$HOLEn4gpbfcREg/ItYA.O.:13389:0:999999:7:::
Is that helpful?
Thanks,
John
Logged In: YES
user_id=129364
Try editing /etc/shadow, and changing the line for info_rt
to read :
info_rt:$1$56862741$HOLEn4gpbfcREg/ItYA.O.:::::::
Logged In: YES
user_id=1460697
Thank you for these quick responses Jamie!
I have about dozens of accounts that are behaving this
way. I was using info_rt as 1 example. Do I make a
similar change to all of them (I am guessing not). I do
not understand the change you are recommending. Any chance
of further explanation?
Again, thank you for your help in this.
John
Logged In: YES
user_id=129364
I would recommend testing with the info_rt user first, and
if it works making a similar change to all of them in
/etc/shadow. This change turns off all password expiry
settings, which myst have been the cause of your problem..
Logged In: YES
user_id=1460697
Additional information for my previous entry:
I understand what the 0 7 and 999999 are but not the 13389
in $1$56862741$HOLEn4gpbfcREg/ItYA.O.:13389:0:999999:7:::
Logged In: YES
user_id=129364
The 13389 is the date on which the password was last
changed, in days since Jan 1st 1970.
Logged In: YES
user_id=1460697
Sorry to bother you. I just had this happen again(user's
pasword changes "on it's own"). I checked the shadow log
and here is what I get:
alex:$1$58000841$GEdZANwou6hvdhN9f/lGh0:13402::::::
This is freaking me out...
Logged In: YES
user_id=129364
So this 'alex' user cannot login? That shadow line shouldn't
stop him, as there is no maximum days limit in there..
Logged In: YES
user_id=1460697
I know, and yet it said that his password failed.
:(
Logged In: YES
user_id=129364
It sounds like his password got changed, rather than it
expiring. Did he change it, perhaps using Webmin or the
passwd command?
Logged In: YES
user_id=1460697
He swears he did not. He uses outlook and suddenly it
failed. But if nothing else rings a bell with you then
maybe I should give it some time and see what happens.
Logged In: YES
user_id=129364
I can't see how it could get magically changed like that,
sorry..
Logged In: YES
user_id=1460697
Me neither. Thanks for your responses. I will post again
if it happens again.
Thanks again,
John