[22559] in bugtraq

home help back first fref pref prev next nref lref last post

Re: pam limits drops privileges

daemon@ATHENA.MIT.EDU (Lukasz Trabinski)
Fri Sep 7 12:11:19 2001

Date: Thu, 6 Sep 2001 10:27:50 +0200 (CEST)
From: Lukasz Trabinski <lukasz@lt.wsisiz.edu.pl>
To: Tarhon-Onu Victor <mituc@iasi.rdsnet.ro>
Cc: <bugtraq@securityfocus.com>
In-Reply-To: <Pine.LNX.4.33.0109061038420.18213-100000@blackblue.iasi.rdsnet.ro>
Message-ID: <Pine.LNX.4.33.0109061018020.1365-100000@lt.wsisiz.edu.pl>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=ISO-8859-2
Content-Transfer-Encoding: 8BIT

On Thu, 6 Sep 2001, Tarhon-Onu Victor wrote:
>
> 	ssh into your box as any user then telnet into it as user test, or
> login as test from the console.

On console (tty5) after login tree times as test by ssh:

lt login: test
Password:
Too many logins for 'test'.

In logs files:

Sep  6 10:18:57 lt pam_limits[1451]: Too many logins (max 2) for test
Sep  6 10:18:59 lt login(pam_unix)[1451]: session opened for user test by LOGIN(uid=0)
Sep  6 10:18:59 lt pam_limits[1451]: Too many logins (max 2) for test
Sep  6 10:19:01 lt login[1451]: Permission denied

By telnet:

lt:~$ telnet lt
Trying 213.135.44.150...
Connected to lt.
Escape character is '^]'.

Linux 2.4.9 (lt.wsisiz.edu.pl) (10:22 on Thursday, 06 September 2001)

login: test
Password:
Too many logins for 'test'.
Too many logins for 'test'.

Permission denied
Connection closed by foreign host.


-- 
*[ Łukasz Tr±biński ]*
SysAdmin @wsisiz.edu.pl



home help back first fref pref prev next nref lref last post