免费注册 查看新帖 |

Chinaunix

  平台 论坛 博客 文库
最近访问板块 发新帖
查看: 9561 | 回复: 7
打印 上一主题 下一主题

急。修改/etc/pam.d/system-auth后,ssh无法远程登陆 [复制链接]

论坛徽章:
0
跳转到指定楼层
1 [收藏(0)] [报告]
发表于 2011-07-28 16:59 |只看该作者 |倒序浏览
8可用积分
我在修改完/etc/pam.d/system-auth后,保存,退出系统重新远程ssh登录系统,登不上去。
   
  后来把system-auth还原后,还是不能ssh远程登录,root也不行

  本地登录后root用户下执行 ssh -vv 本机ip,有以下信息:

OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Connecting to 192.168.181.128 [192.168.181.128] port 22.
debug1: Connection established.
debug1: permanently_set_uid: 0/0
debug1: identity file /root/.ssh/identity type -1
debug1: identity file /root/.ssh/id_rsa type -1
debug1: identity file /root/.ssh/id_dsa type -1
debug1: loaded 3 keys
debug1: Remote protocol version 2.0, remote software version OpenSSH_4.3
debug1: match: OpenSSH_4.3 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_4.3
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host '192.168.181.128' is known and matches the RSA host key.
debug1: Found key in /root/.ssh/known_hosts:1
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,gssapi-with-mic
debug1: Next authentication method: gssapi-with-mic
debug1: Unspecified GSS failure. Minor code may provide more information
Unknown code krb5 195
debug1: Unspecified GSS failure. Minor code may provide more information
Unknown code krb5 195
debug1: Unspecified GSS failure. Minor code may provide more information
Unknown code krb5 195

debug1: Next authentication method: publickey
debug1: Trying private key: /root/.ssh/identity
debug1: Trying private key: /root/.ssh/id_rsa
debug1: Trying private key: /root/.ssh/id_dsa
debug1: No more authentication methods to try.


  和正常linux主机异常的,就是以上的红色位置

  帮忙看一下

论坛徽章:
0
2 [报告]
发表于 2011-07-28 17:00 |只看该作者
目前   

已执行过: ssh -o GSSAPIAuthentication=no server-ip

/etc/pam.d/system-auth已恢复

重启一下sshd
清空一下客户端/root/.ssh/known_hosts文件   也已做


还是不行。

论坛徽章:
0
3 [报告]
发表于 2011-07-28 17:05 |只看该作者
关闭GSS试试看吧

编辑 /etc/ssh/sshd_config

GSSAPIAuthentication no
GSSAPICleanupCredentials no

service sshd restart

论坛徽章:
0
4 [报告]
发表于 2011-07-28 17:10 |只看该作者
回复 3# alonerhu




还是不成。

继续在线等~~

论坛徽章:
0
5 [报告]
发表于 2011-07-28 20:13 |只看该作者
回复 1# yeahzp


    修改/etc/pam.d/system-auth  之前  ssh是正常的吗?

论坛徽章:
0
6 [报告]
发表于 2011-07-28 20:26 |只看该作者
回复 1# yeahzp


    等把你  log/secure  ssh 相关的日志发出来!      可能目录权限问题!

论坛徽章:
0
7 [报告]
发表于 2011-07-28 20:55 |只看该作者
Jul 28 17:40:01 ms1 crond[20394]: PAM unable to dlopen(<*unknown module path*>)
Jul 28 17:40:01 ms1 crond[20393]: PAM [error: <*unknown module path*>: 无法打开共享对象文件: 没有那个文件或目录]
Jul 28 17:40:01 ms1 crond[20393]: PAM adding faulty module: <*unknown module path*>
Jul 28 17:40:01 ms1 crond[20394]: PAM [error: <*unknown module path*>: 无法打开共享对象文件: 没有那个文件或目录]
Jul 28 17:40:01 ms1 crond[20394]: PAM adding faulty module: <*unknown module path*>
Jul 28 17:40:01 ms1 crond[20393]: PAM (crond) illegal module type: ~
Jul 28 17:40:01 ms1 crond[20394]: PAM (crond) illegal module type: ~
Jul 28 17:40:01 ms1 crond[20393]: PAM (crond) no control flag supplied
Jul 28 17:40:01 ms1 crond[20394]: PAM (crond) no control flag supplied
Jul 28 17:40:01 ms1 crond[20393]: PAM (crond) no module name supplied
Jul 28 17:40:01 ms1 crond[20394]: PAM (crond) no module name supplied
Jul 28 17:40:01 ms1 crond[20393]: PAM (crond) illegal module type: ~
Jul 28 17:40:01 ms1 crond[20394]: PAM (crond) illegal module type: ~
Jul 28 17:40:01 ms1 crond[20393]: PAM (crond) no control flag supplied
Jul 28 17:40:01 ms1 crond[20394]: PAM (crond) no control flag supplied
Jul 28 17:40:01 ms1 crond[20393]: PAM (crond) no module name supplied
Jul 28 17:40:01 ms1 crond[20394]: PAM (crond) no module name supplied
Jul 28 17:45:01 ms1 crond[22254]: PAM (crond) illegal module type: ~
Jul 28 17:45:01 ms1 crond[22254]: PAM (crond) no control flag supplied
Jul 28 17:45:01 ms1 crond[22254]: PAM (crond) no module name supplied
Jul 28 17:45:01 ms1 crond[22254]: PAM unable to dlopen(<*unknown module path*>)
Jul 28 17:45:01 ms1 crond[22254]: PAM [error: <*unknown module path*>: 无法打开共享对象文件: 没有那个文件或目录]
Jul 28 17:45:01 ms1 crond[22254]: PAM adding faulty module: <*unknown module path*>
Jul 28 17:45:01 ms1 crond[22254]: PAM (crond) illegal module type: ~
Jul 28 17:45:01 ms1 crond[22254]: PAM (crond) no control flag supplied
Jul 28 17:45:01 ms1 crond[22254]: PAM (crond) no module name supplied
Jul 28 17:45:01 ms1 crond[22254]: PAM (crond) illegal module type: ~
Jul 28 17:45:01 ms1 crond[22254]: PAM (crond) no control flag supplied
Jul 28 17:45:01 ms1 crond[22254]: PAM (crond) no module name supplied
Jul 28 17:50:01 ms1 crond[24020]: PAM (crond) illegal module type: ~
Jul 28 17:50:01 ms1 crond[24020]: PAM (crond) no control flag supplied
Jul 28 17:50:01 ms1 crond[24020]: PAM (crond) no module name supplied
Jul 28 17:50:01 ms1 crond[24021]: PAM (crond) illegal module type: ~
Jul 28 17:50:01 ms1 crond[24020]: PAM unable to dlopen(<*unknown module path*>)
Jul 28 17:50:01 ms1 crond[24021]: PAM (crond) no control flag supplied
Jul 28 17:50:01 ms1 crond[24021]: PAM (crond) no module name supplied
Jul 28 17:50:01 ms1 crond[24021]: PAM unable to dlopen(<*unknown module path*>)
Jul 28 17:50:01 ms1 crond[24020]: PAM [error: <*unknown module path*>: 无法打开共享对象文件: 没有那个文件或目录]
Jul 28 17:50:01 ms1 crond[24020]: PAM adding faulty module: <*unknown module path*>
Jul 28 17:50:01 ms1 crond[24021]: PAM [error: <*unknown module path*>: 无法打开共享对象文件: 没有那个文件或目录]
Jul 28 17:50:01 ms1 crond[24021]: PAM adding faulty module: <*unknown module path*>
Jul 28 17:50:01 ms1 crond[24020]: PAM (crond) illegal module type: ~
Jul 28 17:50:01 ms1 crond[24021]: PAM (crond) illegal module type: ~
Jul 28 17:50:01 ms1 crond[24020]: PAM (crond) no control flag supplied
Jul 28 17:50:01 ms1 crond[24021]: PAM (crond) no control flag supplied
Jul 28 17:50:01 ms1 crond[24020]: PAM (crond) no module name supplied
Jul 28 17:50:01 ms1 crond[24021]: PAM (crond) no module name supplied
Jul 28 17:50:01 ms1 crond[24020]: PAM (crond) illegal module type: ~
Jul 28 17:50:01 ms1 crond[24021]: PAM (crond) illegal module type: ~
Jul 28 17:50:01 ms1 crond[24020]: PAM (crond) no control flag supplied
Jul 28 17:50:01 ms1 crond[24021]: PAM (crond) no control flag supplied
Jul 28 17:50:01 ms1 crond[24020]: PAM (crond) no module name supplied
Jul 28 17:50:01 ms1 crond[24021]: PAM (crond) no module name supplied
Jul 28 17:55:01 ms1 crond[25837]: PAM (crond) illegal module type: ~
Jul 28 17:55:01 ms1 crond[25837]: PAM (crond) no control flag supplied
Jul 28 17:55:01 ms1 crond[25837]: PAM (crond) no module name supplied
Jul 28 17:55:01 ms1 crond[25837]: PAM unable to dlopen(<*unknown module path*>)
Jul 28 17:55:01 ms1 crond[25837]: PAM [error: <*unknown module path*>: 无法打开共享对象文件: 没有那个文件或目录]
Jul 28 17:55:01 ms1 crond[25837]: PAM adding faulty module: <*unknown module path*>
Jul 28 17:55:01 ms1 crond[25837]: PAM (crond) illegal module type: ~
Jul 28 17:55:01 ms1 crond[25837]: PAM (crond) no control flag supplied
Jul 28 17:55:01 ms1 crond[25837]: PAM (crond) no module name supplied
Jul 28 17:55:01 ms1 crond[25837]: PAM (crond) illegal module type: ~
Jul 28 17:55:01 ms1 crond[25837]: PAM (crond) no control flag supplied
Jul 28 17:55:01 ms1 crond[25837]: PAM (crond) no module name supplied
Jul 28 18:00:01 ms1 crond[27542]: PAM (crond) illegal module type: ~
Jul 28 18:00:01 ms1 crond[27542]: PAM (crond) no control flag supplied
Jul 28 18:00:01 ms1 crond[27542]: PAM (crond) no module name supplied
Jul 28 18:00:01 ms1 crond[27543]: PAM (crond) illegal module type: ~
Jul 28 18:00:01 ms1 crond[27543]: PAM (crond) no control flag supplied
Jul 28 18:00:01 ms1 crond[27543]: PAM (crond) no module name supplied
Jul 28 18:00:01 ms1 crond[27542]: PAM unable to dlopen(<*unknown module path*>)
Jul 28 18:00:01 ms1 crond[27543]: PAM unable to dlopen(<*unknown module path*>)
Jul 28 18:00:01 ms1 crond[27542]: PAM [error: <*unknown module path*>: 无法打开共享对象文件: 没有那个文件或目录]
Jul 28 18:00:01 ms1 crond[27542]: PAM adding faulty module: <*unknown module path*>
Jul 28 18:00:01 ms1 crond[27543]: PAM [error: <*unknown module path*>: 无法打开共享对象文件: 没有那个文件或目录]
Jul 28 18:00:01 ms1 crond[27543]: PAM adding faulty module: <*unknown module path*>
Jul 28 18:00:01 ms1 crond[27542]: PAM (crond) illegal module type: ~
Jul 28 18:00:01 ms1 crond[27543]: PAM (crond) illegal module type: ~
Jul 28 18:00:01 ms1 crond[27542]: PAM (crond) no control flag supplied
Jul 28 18:00:01 ms1 crond[27543]: PAM (crond) no control flag supplied
Jul 28 18:00:01 ms1 crond[27542]: PAM (crond) no module name supplied
Jul 28 18:00:01 ms1 crond[27543]: PAM (crond) no module name supplied
Jul 28 18:00:01 ms1 crond[27542]: PAM (crond) illegal module type: ~
Jul 28 18:00:01 ms1 crond[27543]: PAM (crond) illegal module type: ~
Jul 28 18:00:01 ms1 crond[27542]: PAM (crond) no control flag supplied
Jul 28 18:00:01 ms1 crond[27543]: PAM (crond) no control flag supplied
Jul 28 18:00:01 ms1 crond[27542]: PAM (crond) no module name supplied
Jul 28 18:00:01 ms1 crond[27543]: PAM (crond) no module name supplied
Jul 28 18:01:01 ms1 crond[27940]: PAM (crond) illegal module type: ~
Jul 28 18:01:01 ms1 crond[27940]: PAM (crond) no control flag supplied
Jul 28 18:01:01 ms1 crond[27940]: PAM (crond) no module name supplied
Jul 28 18:01:01 ms1 crond[27940]: PAM unable to dlopen(<*unknown module path*>)
Jul 28 18:01:01 ms1 crond[27940]: PAM [error: <*unknown module path*>: 无法打开共享对象文件: 没有那个文件或目录]
Jul 28 18:01:01 ms1 crond[27940]: PAM adding faulty module: <*unknown module path*>
Jul 28 18:01:01 ms1 crond[27940]: PAM (crond) illegal module type: ~
Jul 28 18:01:01 ms1 crond[27940]: PAM (crond) no control flag supplied
Jul 28 18:01:01 ms1 crond[27940]: PAM (crond) no module name supplied
Jul 28 18:01:01 ms1 crond[27940]: PAM (crond) illegal module type: ~
Jul 28 18:01:01 ms1 crond[27940]: PAM (crond) no control flag supplied
Jul 28 18:01:01 ms1 crond[27940]: PAM (crond) no module name supplied
Jul 28 18:05:01 ms1 crond[29205]: PAM (crond) illegal module type: ~
Jul 28 18:05:01 ms1 crond[29205]: PAM (crond) no control flag supplied
Jul 28 18:05:01 ms1 crond[29205]: PAM (crond) no module name supplied
Jul 28 18:05:01 ms1 crond[29205]: PAM unable to dlopen(<*unknown module path*>)
Jul 28 18:05:01 ms1 crond[29205]: PAM [error: <*unknown module path*>: 无法打开共享对象文件: 没有那个文件或目录]
Jul 28 18:05:01 ms1 crond[29205]: PAM adding faulty module: <*unknown module path*>
Jul 28 18:05:01 ms1 crond[29205]: PAM (crond) illegal module type: ~
Jul 28 18:05:01 ms1 crond[29205]: PAM (crond) no control flag supplied
Jul 28 18:05:01 ms1 crond[29205]: PAM (crond) no module name supplied
Jul 28 18:05:01 ms1 crond[29205]: PAM (crond) illegal module type: ~
Jul 28 18:05:01 ms1 crond[29205]: PAM (crond) no control flag supplied
Jul 28 18:05:01 ms1 crond[29205]: PAM (crond) no module name supplied
Jul 28 18:10:01 ms1 crond[30946]: PAM (crond) illegal module type: ~
Jul 28 18:10:01 ms1 crond[30946]: PAM (crond) no control flag supplied
Jul 28 18:10:01 ms1 crond[30946]: PAM (crond) no module name supplied
Jul 28 18:10:01 ms1 crond[30946]: PAM unable to dlopen(<*unknown module path*>)
Jul 28 18:10:01 ms1 crond[30946]: PAM [error: <*unknown module path*>: 无法打开共享对象文件: 没有那个文件或目录]
Jul 28 18:10:01 ms1 crond[30946]: PAM adding faulty module: <*unknown module path*>
Jul 28 18:10:01 ms1 crond[30946]: PAM (crond) illegal module type: ~
Jul 28 18:10:01 ms1 crond[30947]: PAM (crond) illegal module type: ~
Jul 28 18:10:01 ms1 crond[30946]: PAM (crond) no control flag supplied
Jul 28 18:10:01 ms1 crond[30946]: PAM (crond) no module name supplied
Jul 28 18:10:01 ms1 crond[30947]: PAM (crond) no control flag supplied
Jul 28 18:10:01 ms1 crond[30947]: PAM (crond) no module name supplied
Jul 28 18:10:01 ms1 crond[30947]: PAM unable to dlopen(<*unknown module path*>)
Jul 28 18:10:01 ms1 crond[30946]: PAM (crond) illegal module type: ~
Jul 28 18:10:01 ms1 crond[30946]: PAM (crond) no control flag supplied
Jul 28 18:10:01 ms1 crond[30947]: PAM [error: <*unknown module path*>: 无法打开共享对象文件: 没有那个文件或目录]
Jul 28 18:10:01 ms1 crond[30946]: PAM (crond) no module name supplied
Jul 28 18:10:01 ms1 crond[30947]: PAM adding faulty module: <*unknown module path*>
Jul 28 18:10:01 ms1 crond[30947]: PAM (crond) illegal module type: ~
Jul 28 18:10:01 ms1 crond[30947]: PAM (crond) no control flag supplied
Jul 28 18:10:01 ms1 crond[30947]: PAM (crond) no module name supplied
Jul 28 18:10:01 ms1 crond[30947]: PAM (crond) illegal module type: ~
Jul 28 18:10:01 ms1 crond[30947]: PAM (crond) no control flag supplied
Jul 28 18:10:01 ms1 crond[30947]: PAM (crond) no module name supplied

论坛徽章:
381
CU十二周年纪念徽章
日期:2014-01-04 22:46:58CU大牛徽章
日期:2013-03-13 15:32:35CU大牛徽章
日期:2013-03-13 15:38:15CU大牛徽章
日期:2013-03-13 15:38:52CU大牛徽章
日期:2013-03-14 14:08:55CU大牛徽章
日期:2013-04-17 11:17:19CU大牛徽章
日期:2013-04-17 11:17:32CU大牛徽章
日期:2013-04-17 11:17:37CU大牛徽章
日期:2013-04-17 11:17:42CU大牛徽章
日期:2013-04-17 11:17:47CU大牛徽章
日期:2013-04-17 11:17:52CU大牛徽章
日期:2013-04-17 11:17:56
8 [报告]
发表于 2011-07-28 21:01 |只看该作者
楼主的pam文件里面有非法字符?贴上来看看
您需要登录后才可以回帖 登录 | 注册

本版积分规则 发表回复

  

北京盛拓优讯信息技术有限公司. 版权所有 京ICP备16024965号-6 北京市公安局海淀分局网监中心备案编号:11010802020122 niuxiaotong@pcpop.com 17352615567
未成年举报专区
中国互联网协会会员  联系我们:huangweiwei@itpub.net
感谢所有关心和支持过ChinaUnix的朋友们 转载本站内容请注明原作者名及出处

清除 Cookies - ChinaUnix - Archiver - WAP - TOP