[Resolved?]Re: Passwords don't work anywhere, SSH pubkey does. PAM problem?

[Joshua Gardner]

Excerpts from NoOp's message of Sun Jun 06 22:10:26 -0600 2010:
> On 06/06/2010 08:23 PM, Joshua Gardner wrote:
> > Excerpts from Joshua Gardner's message of Sun Jun 06 20:44:33 -0600 2010:
> >> Excerpts from Joshua Gardner's message of Sun Jun 06 19:09:13 -0600 2010:
> >> > Excerpts from J's message of Sun Jun 06 16:59:38 -0600 2010:
> >> > > On Sun, Jun 6, 2010 at 16:58, NoOp <glgxg at sbcglobal.net> wrote:
> >> > > > On 06/06/2010 11:29 AM, Joshua Gardner wrote:
> >> > > >> Well, that didn't work. Any other ideas?
> >> > > >
> >> > > > Check:
> >> > > > $ cat /var/log/auth.log
> >> > > > to see if you can find any glaring hints there.
> >> > > 
> >> > > And take a look at /etc/passwd too.  IIRC, switching someone's shell
> >> > > to something other than one of he shells will give results like that,
> >> > > HOWEVER, that should also prevent you from being able to SSH in and
> >> > > get a shell as well, but it's still worth looking at.
> >> > > 
> >> > > I'm wondering if your server wasn't compromised...
> >> > > 
> >> > 
> >> > Well, it's not the shell. Still definitely /bin/bash. That wouldn't
> >> > have screwed up Citadel, anyway.
> >> > 
> >> > I've been wondering if it was compromised too, but how would I tell?
> >> > Should I just backup and reinstall?
> >> > 
> >> > -Josh
> >> 
> >> I had someone look at it over SSH and it appears that either a
> >> corruption or a compromise has damaged all of my PAM libraries; they
> >> don't pass a sha1sum test. I'm just going to reinstall.
> >> 
> >> Thanks anyway.
> >> 
> >> -Josh
> > 
> > Heh, phew. It wasn't that after all. Samba's databases got corrupted
> > and Samba's hooks into PAM got all screwed up. sha1sum test failures
> > was due to mismatched versions between my system and my
> > friend's. Removing the corrupted Samba databases fixed everything.
> > 
> > -Josh
> 
> So we could tag this [Resolved] then so that other folks on the list
> don't continue to try to troubleshoot?
> 
> BTW: a corrupted Samba database shouldn't cause all passwords (including
> sudo) to not work. You might want to explore further to see if you can
> figure out what actually caused the problem.
> <https://launchpad.net/+search?field.text=samba+%2Bpassword+corruption&field.actions.search=Search>
> 

Go ahead and mark it Resolved. I don't have enough expertise with PAM
to figure out if there really is something wrong. That search you
linked turned up some similar examples, like this
one https://bugs.launchpad.net/ubuntu/+source/samba/+bug/292791.

-Josh
-- 
A king's castle is his home.