I am having a problem adding a new user. Perhaps I don't understand the shadow file or sth. I use FC2 with GNOME. I used at first the command-line I/F since I'm more familiar and more comfortable with that technique of sys admin. [jmccarty@Presario-1]$ su - Password: [root@Presario-1 root]# useradd freddy [root@Presario-1 root]# passwd freddy Changing password for user freddy. New UNIX password: Retype new UNIX password: passwd: all authentication tokens updated successfully. [root@Presario-1 root]# exit [jmccarty@Presario-1 jmccarty]$ finger freddy Login: freddy Name: (null) Directory: /home/freddy Shell: /bin/bash Never logged in. No mail. No Plan. [jmccarty@Presario-1 jmccarty]$ login login: freddy Password: Login incorrect login: login: Login incorrect login: Login incorrect login: Login incorrect [jmccarty@Presario-1 jmccarty]$ grep freddy /etc/passwd freddy:x:502:502::/home/freddy:/bin/bash [jmccarty@Presario-1 jmccarty]$ I'm sure I typed in the password correctly. So,... [jmccarty@Presario-1 jmccarty]$ su - Password: [root@Presario-1 root]# userdel -r freddy [root@Presario-1 root]# finger freddy finger: freddy: no such user. [root@Presario-1 root]# exit [jmccarty@Presario-1 jmccarty]$ Then I used the [RedHat]->System Settings->Users and Groups to create the user, with the same results. The user and /home/freddy get created, but I can't log in as freddy. At least, not using login. What am I missing? Mike -- p="p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);} This message made from 100% recycled bits. You have found the bank of Larn. I can explain it for you, but I can't understand it for you. I speak only for myself, and I am unanimous in that!

> Linux... the choice of a GNU generation. <<

Guillou Erwan wrote: > Hi, > > Once you have add the user account, did you check that /home/user was > really existing? Yes, and it does. From the man page: When invoked without the -D option, the useradd command creates a new user account using the values specified on the command line and the default values from the system. The new user account will be entered into the system files as needed, the home directory will be created, and initial files copied, depending on the command line options. The version provided with Red Hat Linux will create a group for each user added to the system, unless the -n option is given. The options which apply to the useradd command are: > Maybe you have to create it... usually I specify all options for this > useradd command to force shell, directory name, comment. > > Else, did you look in log files why login fails ? > > You can look in /var/log/secure or auth something name file. > You may find some explanation for the failure. I see nothing in /var/log/secure which indicates any sort of failure. From /var/log/secure Nov 8 13:20:14 Presario-1 useradd[29532]: new user: name=freddy, uid=502, gid=500, home=/home/freddy, shell=/bin/bash Nov 8 13:31:38 Presario-1 useradd[29772]: new group: name=freddy, gid=502 Nov 8 13:37:50 Presario-1 userdel[29904]: delete user `freddy' Nov 8 13:37:50 Presario-1 userdel[29904]: remove group `freddy' > Under root account you can also try su - user. > It should not ask for password but it will launch a login shell. It should indeed. But I don't want new users logging in as root in order to su to themselves!

Mike -- p="p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);} This message made from 100% recycled bits. You have found the bank of Larn. I can explain it for you, but I can't understand it for you. I speak only for myself, and I am unanimous in that!

> Linux... the choice of a GNU generation. <<

I am having a problem adding a new user. Perhaps I don't understand the shadow file or sth. I use FC2 with GNOME. I used at first the command-line I/F since I'm more familiar and more comfortable with that technique of sys admin.

[jmccarty@Presario-1 jmccarty]$ login login: freddy Password: Login incorrect What am I missing? Mike --

Thomas Springer wrote: > Am Dienstag, den 08.11.2005, 13:55 -0600 schrieb Mike McCarty: > >>I am having a problem adding a new user. Perhaps I don't understand >>the shadow file or sth. >> >>I use FC2 with GNOME. I used at first the command-line I/F since >>I'm more familiar and more comfortable with that technique of >>sys admin. > > > [snip] > > >>[jmccarty@Presario-1 jmccarty]$ login >>login: freddy >>Password: >>Login incorrect >> >> >>What am I missing? >> >>Mike >>-- > > > I also did that and got the same result here with FC4. > > There's nothing related to that in > > /var/log/secure > /var/log/messages > /var/log/audit/audit.log > > Couldn't find anything helpful in > > rpm -q --changelog util-linux | grep login > <search> site:bugzilla.redhat.com > > Then I thought of how one could strace `login` ? ? ? > > Hopefully someone else can tell what's happening. > > > Thomas > I have more from /var/log/messages (1) Nov 8 19:35:50 Presario-1 su(pam_unix)[31141]: session opened for user root by jmccarty(uid=500) (2) Nov 8 19:38:20 Presario-1 passwd(pam_unix)[31179]: password changed for freddy (3) Nov 8 19:38:22 Presario-1 su(pam_unix)[31141]: session closed for user root (4) Nov 8 19:38:28 Presario-1 login(pam_unix)[31181]: authentication failure; logname=jmccarty uid=500 euid=500 tty=pts/4 ruser$Nov 8 19:38:31 Presario-1 login[31181]: FAILED LOGIN 1 FROM (null) FOR freddy, Authentication failure (5) Nov 8 19:38:31 Presario-1 login(pam_unix)[31181]: bad username [] (6) Nov 8 19:38:34 Presario-1 login[31181]: FAILED LOGIN 2 FROM (null) FOR , Authentication failure (7) Nov 8 19:38:34 Presario-1 login(pam_unix)[31181]: bad username [] (8) Nov 8 19:38:36 Presario-1 login[31181]: FAILED LOGIN 3 FROM (null) FOR , Authentication failure (9) Nov 8 19:38:37 Presario-1 login(pam_unix)[31181]: bad username [] (10)Nov 8 19:38:39 Presario-1 login[31181]: FAILED LOGIN SESSION FROM (null) FOR , Authentication failure (11)Nov 8 19:38:51 Presario-1 su(pam_unix)[31184]: session opened for user root by jmccarty(uid=500) (1) is me going su - to create the freddy user (2) is me changing his password using passwd (3) is me exiting back to myself (4)-(10) is my trying to use login to log on as freddy, failing, then just hitting return until login quit trying (11) is me su - to root so I can get the content of /var/log/messages for this e-mail [root@Presario-1 root]# finger freddy Login: freddy Name: (null) Directory: /home/freddy Shell: /bin/bash Never logged in. No mail. No Plan. [root@Presario-1 root]# Does this have something to do with freddy not being propagated to the shadow file? Nope, I just checked... [root@Presario-1 root]# grep freddy /etc/shadow freddy:$1$mMzZcWPf$TubCOWrHFsylDJnnO04qH1:13096:0:99999:7::: [root@Presario-1 root]# I did a usermod -c "Freddy" freddy and it took and finger now shows this Name: rather than (null), but logins still do not work.

Craig White wrote: > ---- > reassert the password... > > passwd freddy #assuming you change it back > # re-enter password - watch out for caps lock key > # perhaps try a different password to make sure > # the hash changes in /etc/shadow > > Craig Yep. Same symptoms. I cannot use login to log in as freddy, a newly created user.

Craig White wrote: > On Tue, 2005-11-08 at 20:18 -0600, Mike McCarty wrote: > >>Craig White wrote: >> >>>---- >>>reassert the password... >>> >>>passwd freddy #assuming you change it back >>> # re-enter password - watch out for caps lock key >>> # perhaps try a different password to make sure >>> # the hash changes in /etc/shadow >>> >>>Craig >> >>Yep. Same symptoms. I cannot use login to log in as freddy, a >>newly created user. > > ---- > create another user...and try. > > did you ever manually edit /etc/passwd or /etc/shadow so perhaps there's > a mismatch between them? Nope. I only used useradd, userdel, passwd, usermod, and the Gnome tools. I just tried with another user name, and it fails the same exact way.

Craig White wrote: > On Tue, 2005-11-08 at 20:31 -0600, Mike McCarty wrote: > >>Craig White wrote: >> >>>On Tue, 2005-11-08 at 20:18 -0600, Mike McCarty wrote: >>> >>> >>>>Craig White wrote: >>>> >>>> >>>>>---- >>>>>reassert the password... >>>>> >>>>>passwd freddy #assuming you change it back >>>>> # re-enter password - watch out for caps lock key >>>>> # perhaps try a different password to make sure >>>>> # the hash changes in /etc/shadow >>>>> >>>>>Craig >>>> >>>>Yep. Same symptoms. I cannot use login to log in as freddy, a >>>>newly created user. >>> >>>---- >>>create another user...and try. >>> >>>did you ever manually edit /etc/passwd or /etc/shadow so perhaps there's >>>a mismatch between them? >> >>Nope. I only used useradd, userdel, passwd, usermod, and the Gnome >>tools. >> >>I just tried with another user name, and it fails the same exact >>way. > > --- > can you su ? > > su - freddy > > Craig Yep, no problem. In one window... [root@Presario-1 root]# useradd freddy [root@Presario-1 root]# passwd freddy Changing password for user freddy. New UNIX password: Retype new UNIX password: passwd: all authentication tokens updated successfully. [root@Presario-1 root]# In another window... [jmccarty@Presario-1 jmccarty]$ su - freddy Password: [freddy@Presario-1 freddy]$ pwd /home/freddy [freddy@Presario-1 freddy]$ whoami freddy [freddy@Presario-1 freddy]$ The password I entered was, of course, freddy's. However, after exit back to myself, [jmccarty@Presario-1 jmccarty]$ login login: freddy Password: Login incorrect login: I used the same password that worked with su -

Craig White wrote: > On Tue, 2005-11-08 at 20:49 -0600, Mike McCarty wrote: > >>Craig White wrote: >> >>>On Tue, 2005-11-08 at 20:31 -0600, Mike McCarty wrote: >>> >>> >>>>Craig White wrote: >>>> >>>> >>>>>On Tue, 2005-11-08 at 20:18 -0600, Mike McCarty wrote: >>>>> >>>>> >>>>> >>>>>>Craig White wrote: >>>>>> >>>>>> >>>>>> >>>>>>>---- >>>>>>>reassert the password... >>>>>>> >>>>>>>passwd freddy #assuming you change it back >>>>>>> # re-enter password - watch out for caps lock key >>>>>>> # perhaps try a different password to make sure >>>>>>> # the hash changes in /etc/shadow >>>>>>> >>>>>>>Craig >>>>>> >>>>>>Yep. Same symptoms. I cannot use login to log in as freddy, a >>>>>>newly created user. >>>>> >>>>>---- >>>>>create another user...and try. >>>>> >>>>>did you ever manually edit /etc/passwd or /etc/shadow so perhaps there's >>>>>a mismatch between them? >>>> >>>>Nope. I only used useradd, userdel, passwd, usermod, and the Gnome >>>>tools. >>>> >>>>I just tried with another user name, and it fails the same exact >>>>way. >>> >>>--- >>>can you su ? >>> >>>su - freddy >>> >>>Craig >> >>Yep, no problem. >> >>In one window... >> >> >>[root@Presario-1 root]# useradd freddy >>[root@Presario-1 root]# passwd freddy >>Changing password for user freddy. >>New UNIX password: >>Retype new UNIX password: >>passwd: all authentication tokens updated successfully. >>[root@Presario-1 root]# >> >> >>In another window... >> >>[jmccarty@Presario-1 jmccarty]$ su - freddy >>Password: >>[freddy@Presario-1 freddy]$ pwd >>/home/freddy >>[freddy@Presario-1 freddy]$ whoami >>freddy >>[freddy@Presario-1 freddy]$ >> >>The password I entered was, of course, freddy's. >> >>However, after exit back to myself, >> >>[jmccarty@Presario-1 jmccarty]$ login >>login: freddy >>Password: >>Login incorrect >> >> >>login: >> >>I used the same password that worked with su - > > ---- > then clearly your issue isn't with /etc/passwd or /etc/shadow but is > with 'login' command itself which I have never used and a quick perusal > of 'man login' tells me that there are circumstances which may affect > login ability. But man login also says that the special conditions are checked before the prompt for password takes place. $ ls /etc/usertty ls: /etc/usertty: No such file or directory How about this... $ login jmccarty Password: Authentication service cannot retrieve authentication info. $ whoami jmccarty $ finger jmccarty Login: jmccarty Name: Mike McCarty Directory: /home/jmccarty Shell: /bin/bash On since Mon Nov 7 14:11 (CST) on :0 (messages off) On since Mon Nov 7 16:53 (CST) on pts/2 from :0.0 1 day 6 hours idle On since Mon Nov 7 15:20 (CST) on pts/3 from :0.0 23 hours 1 minute idle On since Tue Nov 8 20:16 (CST) on pts/6 from :0.0 Mail forwarded to Mike.McCarty(a)sbcglobal.net No mail. No Plan. What does "Authentication service cannot retrieve authentication info." mean? Mike -- p="p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);} This message made from 100% recycled bits. You have found the bank of Larn. I can explain it for you, but I can't understand it for you. I speak only for myself, and I am unanimous in that!

On Tue, 2005-11-08 at 20:49 -0600, Mike McCarty wrote: >[jmccarty@Presario-1 jmccarty]$ login >login: freddy >Password: >Login incorrect > > >login: > >I used the same password that worked with su - ---- then clearly your issue isn't with /etc/passwd or /etc/shadow but is with 'login' command itself which I have never used and a quick perusal of 'man login' tells me that there are circumstances which may affect login ability.

Ok, I guess it's finally time for me to learn how to use bugzilla. Something is either wrong with bash, with PAM, or with login.

-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFDc1f1MDDagS2VwJ4RAjKzAKDiJjKSXsI/4CLgesr0wMWa4MYX3QCdFvXy LmvaIl/U4xNC9LEWk4/kDoU= =TwG6 -----END PGP SIGNATURE-----