telnetd & prpw

[Acadix Software Systems]

Newsgroups: comp.unix.sco.misc
Subject: telnetd & prpw
Summary:
Followup-To:
Distribution:
Organization: Exec-PC Internet - Milwaukee, WI
Keywords:
Cc:

We're getting the following reoccuring error in syslog:

telnetd[pid]: can't find user in the protected password database

There don't seem to be any clues in the tech articles. Any suggestions
would be appreciated.

TIA,

-Jason

[The Great Green Arkleseizure]

Acadix Software Systems <aca...@earth.execpc.com> wrote in message
news:7km107$h...@newsops.execpc.com...

It's someone trying to log into your server, via a telnet session.

Pete

[Tony Lawrence]

Acadix Software Systems wrote:

> We're getting the following reoccuring error in syslog:
>
> telnetd[pid]: can't find user in the protected password database
>
> There don't seem to be any clues in the tech articles. Any suggestions
> would be appreciated.

If it's recurring, you either have someone trying to hack
into your system by trying to guess passwords (you'll get
the same message in syslog for an incorrect user name or a
correct user name and incorrect password) or some confused
user.

The horrid command:

userls -x unsuccessfulLoginAttempts

(which is completely unforgiving wrt to capitalization) can
help you find out WHICH user is failing to login.

--
Tony Lawrence (to...@aplawrence.com)
SCO articles, help, book reviews, tests,
job listings and more : http://www.aplawrence.com

[Acadix Software Systems]

The Great Green Arkleseizure (pe...@viper.karoo.co.uk) wrote:

: Acadix Software Systems <aca...@earth.execpc.com> wrote in message

: news:7km107$h...@newsops.execpc.com...
: > Newsgroups: comp.unix.sco.misc
: > Subject: telnetd & prpw
: > Summary:
: > Followup-To:
: > Distribution:
: > Organization: Exec-PC Internet - Milwaukee, WI
: > Keywords:
: > Cc:

: >
: >
: > We're getting the following reoccuring error in syslog:

: >
: > telnetd[pid]: can't find user in the protected password database
: >
: > There don't seem to be any clues in the tech articles. Any suggestions
: > would be appreciated.

: >
: > TIA,
: >
: > -Jason
: >

: It's someone trying to log into your server, via a telnet session.

: Pete

I probably should have mentioned that someone who left the company before
I started had a fix for this, and we can't find it.

It's not someone trying to log in, at least not according to "userls".
There is supposedly a fix involving the protected password
database, but I can't find any info on it.

Thanks anyway,

-Jason