lists.arthurdejong.org
RSS feed

Re: Failed to login using a serial connection.

[Date Prev][Date Next] [Thread Prev][Thread Next]

Re: Failed to login using a serial connection.



Hi,

It si an embedded Linux so no Selinux there.(old kernel 2.6.37)

Yes I can login using the serial using the root account.

And also yes about the ssh.

There is no /var/log/secure.  Just:

-lastlog
-sshd.log
-wtmp



Envoyé de mon iPad

> Le 12 nov. 2015 à 04:59, Berend De Schouwer <berend@deschouwer.co.za> a écrit 
> :
> 
>> On Wed, 2015-11-11 at 10:27 -0500, eRIC wrote:
>> Hi guys,
>> 
>> Still have an issue with login.
>> 
>> I can login using a telnet session but I can not using a serial
>> connection.
> 
> Can you log in on serial using accounts in /etc/passwd?  It would
> isolate pam_ldap/nslcd.
> 
> ttyO1 is non-standard on Linux, but you don't say what OS.  On Linux
> I'd check selinux for errors, since it's unlikely that a modern Linux
> includes selinux rules for Specialix or Cyclades cards.  I'm not clued
> up enough on stock serial tty names on other *nix-es.
> 
> What getty are you running on the serial ports, and is that setting
> permissions and ownership correctly after auth?
> 
> Is there any help in pam's log (/var/log/secure?)  A lot of pam modules
> also take 'debug' as an option.  It might tell you if it ever runs
> pam_deny.
> 
> pam usually denies logins on certain ttys (/etc/securetty, using
> pam_securetty), and it might deny certain ttys based on /etc/securety/*
> (using pam_limits) but I see neither of those in your pam files.  This
> would happen after auth but before session (from memory.)
> 
> I'm a little surprised to see telnet use an ssh pam session, since
> telnetd usually runs /bin/login (or equivalent) to provide logins.  I
> have to assume you're using SSH instead of telnet.
-- 
To unsubscribe send an email to
nss-pam-ldapd-users-unsubscribe@lists.arthurdejong.org or see
http://lists.arthurdejong.org/nss-pam-ldapd-users/