[WBEL-users] Root login: Access Denied

Kuervers.SJ@forces.gc.ca Kuervers.SJ@forces.gc.ca
Tue, 12 Oct 2004 15:24:58 -0400


Oops - my error.  Missed that in the initial email (how I don't quite know -
must need another coffee).

Yup.  Time to look at how the password changed.  Then, if you can't find a
simple reason (ie. another Administrator who is 'supposed' to have access
changed it), time to look for a rootkit or other evidence of inappropriate
usage.

I would suggest you pull the machine offline and investigate.  It might be
easier to reinstall in the long run. 

Steve

-----Original Message-----
From: Conor Wynne [mailto:weeboy@conorwynne.com]
Sent: Tuesday, October 12, 2004 1:18 PM
To: Kuervers.SJ@forces.gc.ca
Cc: doobeh@thefort.org; whitebox-users@beau.org
Subject: RE: [WBEL-users] Root login: Access Denied


On Tue, 2004-10-12 at 20:01, Kuervers.SJ@forces.gc.ca wrote:
> It could be something as simple as trying to access the wrong machine.
> 
> Are you positive of the DNS lookup and IP Address?  The Access Denied
might
> be because you are trying (for example) to SSH into a Windows server due
to
> incorrect IP.
> 
> Another possibility is a firewall between you and the server.  Is it
> possible that a firewall is blocking the SSH traffic to the server?
> 
> A final possibility:  Is the SSHD service running.  Perhaps it is not set
to
> start up on boot?

Then he would not be also to login as the normal user either. 
-- 
Conor Wynne
Dublin,
Irlande.

GPG Key: http://www.conorwynne.com/gpg-key