Passwords don't work anywhere, SSH pubkey does. PAM problem?

[Joshua Gardner]

Excerpts from J's message of Sun Jun 06 16:59:38 -0600 2010:
> On Sun, Jun 6, 2010 at 16:58, NoOp <glgxg at sbcglobal.net> wrote:
> > On 06/06/2010 11:29 AM, Joshua Gardner wrote:
> >> Well, that didn't work. Any other ideas?
> >
> > Check:
> > $ cat /var/log/auth.log
> > to see if you can find any glaring hints there.
> 
> And take a look at /etc/passwd too.  IIRC, switching someone's shell
> to something other than one of he shells will give results like that,
> HOWEVER, that should also prevent you from being able to SSH in and
> get a shell as well, but it's still worth looking at.
> 
> I'm wondering if your server wasn't compromised...
> 

Well, it's not the shell. Still definitely /bin/bash. That wouldn't
have screwed up Citadel, anyway.

I've been wondering if it was compromised too, but how would I tell?
Should I just backup and reinstall?

-Josh
-- 
It is my meditation all the day, and more than my meat and drink, to know how I shall make the Saints of God comprehend the visions that roll like an overflowing surge before my mind. 
		-- Joseph Smith, Jr.