![](https://seccdn.libravatar.org/avatar/a967ddba97da9c49424dcd261d9e4727.jpg?s=120&d=mm&r=g)
Colin, One more thing, how does samba allow logins when the linux login will not? Can I simply get rid of (delete) the /etc/nologin file, will that solve my problem. Thanks, Nathanael ANdrico -----Original Message----- From: Nathanael Andrico [mailto:nandrico@carolina.rr.com] Sent: Thursday, January 03, 2002 3:21 PM To: Colin M. Valentine Subject: RE: [SLE] A strange root login problem Colin, It is on a network behind a firewall with no ports open. How could I tell if I was attacked. If the /etc/nologin file exists, does that mean someone put it there? That links said ... "That file is typically created by shutdown and relatives" What does that mean? Thanks for any help, Nathanael Andrico -----Original Message----- From: Colin M. Valentine [mailto:val@mitre.org] Sent: Thursday, January 03, 2002 3:07 PM To: Nathanael Andrico Subject: Re: [SLE] A strange root login problem Is the machine on a network that is accessible from the internet? It may have been hacked. Or this may help: http://gul.linux.ime.usp.br/sag-0.5/node76.html Colin
![](https://seccdn.libravatar.org/avatar/a1e371f988a78da92c11c24b8b586b2e.jpg?s=120&d=mm&r=g)
Il 22:04, giovedì 3 gennaio 2002, Nathanael Andrico ha scritto:
Colin,
One more thing, how does samba allow logins when the linux login will not?
Samba can use something different than the usual shadow passwords. Samba users and passwords are stored in smbpasswd and I do not think it uses PAM in the default config. Praise
![](https://seccdn.libravatar.org/avatar/a967ddba97da9c49424dcd261d9e4727.jpg?s=120&d=mm&r=g)
Can I simply get rid of (delete) the /etc/nologin file, will that solve my problem? Thanks, Nathanael ANdrico -----Original Message----- Subject: RE: [SLE] A strange root login problem If the /etc/nologin file exists, does that mean someone put it there? That link http://gul.linux.ime.usp.br/sag-0.5/node76.html said ... "That file is typically created by shutdown and relatives" What does that mean? Thanks for any help, Nathanael Andrico -----Original Message----- From: Colin M. Valentine [mailto:val@mitre.org] Sent: Thursday, January 03, 2002 3:07 PM To: Nathanael Andrico Subject: Re: [SLE] A strange root login problem Is the machine on a network that is accessible from the internet? It may have been hacked. Or this may help: http://gul.linux.ime.usp.br/sag-0.5/node76.html Colin -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq and the archives at http://lists.suse.com
participants (2)
-
Nathanael Andrico
-
Praise