Solaris 8 login problems

[bluedragon2]

I have just encountered the following problem:

Login to console as root and the CDE interface comes up with error box stating problems with dtlogin. Clicking OK takes me back to the console login screen. Doing it again, I close the error window and am able to acces a terminal session.

I ran fsck and everything is fine. I tried to su to a user and I get no shell. I try su - to a user and I get NO Directory!. I have checked permissions and ownership on the /export/home directory and everything is as it should be. I checked the /etc/passwd file and everything there is as it should be. If I try to SSH into the box as a user, I get a permissions error. I turned on telnet and tried getting the No Directory! error.

Does anyone have any ideas on what to check next?

Also, during boot, everything is what it should be.

Thanks

[Blue]Blue[/Blue] [Dragon]

If I wasn't Blue, I would just be a Dragon...

 

[segment]

Install chkrootkit and run it in single user mode. After that check your networking stuff (fw rules, etc)

perl -e 'print $i=pack(c5,(40*2),sqrt(7600),(unpack(c,Q)-3+1+3+3-7),oct(104),10,oct(101));'

 

[SamBones]

The passwords should be in the [tt]/etc/shadow[/tt] file, not [tt]/etc/passwd[/tt]. Make sure that file looks complete and correct. Maybe try changing the password of a user, then doing a "[tt]su - <userid>[/tt]".

Also try running the "[tt]su - <userid>[/tt]" command in [tt]truss[/tt] to see what directory it's trying to use as a home directory. You can also see other errors in [tt]truss[/tt].

Any usefull error messages in [tt]/var/adm/messages[/tt]?

 

[dandan123]

If you are using NIS then you should check your NIS maps -

netgroups, passwd.....

 

[djr111]

you still having dtlogin issues, or is that part fixed?


As far as home dirs....


are you remotely mounting the home dirs or are they local to the box?

is automountd running, what does the command 'automount -v' come back, does it say it can re-mount everything ok.


if you are mounting your home dirs via NFS (remotely)

what does 'showmount -e' state, for the directorie IE: /export/home/partitionA, does it say (everyone)

Meaning anyone can actually get to /export/home/partitionA, but after that permissions locks others from view indivual home dirs. (unless you have it restricted by hosts)

 

[bluedragon2]

Getting ready to work on it this morning. I will try to answer some of the questions and try the suggestions...

I am not running NIS.

There are no remote mounts, everything is on the local server.

The /etc/shadow file appears normal.

I have tried changeing the password for the user and same results.


[Blue]Blue[/Blue] [Dragon]

If I wasn't Blue, I would just be a Dragon...

 

[coffeysm]

Can you paste your /etc/passwd and /etc/shadow files (usernames and passwords commented out of course). Check the permission for where /dev/null points to. Verfiy the permissions on each directory:

ls -ld /export - Should be 755
ls -ld /export/home - Should be 755
ls -ld /export/home/$USER - Should be owned by user and 755
You could try chown -R $USER /export/home/$USER - seen instances where root owned a file.

check /etc/inetd.conf for:
100083/1 stream rpc/tcp wait root /usr/dt/bin/rpc.ttdbserverd rpc.ttdbserverd

Make sure rpc is running also

 

[bluedragon2]

OK, here is where I am at...

To: coffeysm

The /export, /export/home, and /export/home/user directories are all what they should be.

rpcbind is running

I do not have the dt console problem now, but still have the issue with the remote login as stated above.

Here is what I get in /var/adm/message:

Sep 14 14:01:03 netmsmn genunix: [ID 540533 kern.notice] ^MSunOS Release 5.8 Version Generic_117350-33 64-bit
Sep 14 14:01:03 netmsmn genunix: [ID 913632 kern.notice] Copyright 1983-2003 Sun Microsystems, Inc. All rights re
served.
Sep 14 14:01:03 netmsmn genunix: [ID 678236 kern.info] Ethernet address = 0:3:ba:79:65:13
Sep 14 14:01:03 netmsmn unix: [ID 389951 kern.info] mem = 8388608K (0x200000000)
Sep 14 14:01:03 netmsmn unix: [ID 930857 kern.info] avail mem = 8254947328
Sep 14 14:01:03 netmsmn rootnex: [ID 466748 kern.info] root nexus = Sun Fire 280R (2 X UltraSPARC-III+)
Sep 14 14:01:03 netmsmn rootnex: [ID 349649 kern.info] pcisch0 at root: SAFARI 0x8 0x700000
Sep 14 14:01:03 netmsmn genunix: [ID 936769 kern.info] pcisch0 is /pci@8,700000
Sep 14 14:01:03 netmsmn rootnex: [ID 349649 kern.info] pcisch1 at root: SAFARI 0x8 0x600000
Sep 14 14:01:03 netmsmn genunix: [ID 936769 kern.info] pcisch1 is /pci@8,600000
Sep 14 14:01:03 netmsmn qlc: [ID 486054 kern.info] Qlogic FCA Driver v0.40.5 (0): F/W version 2.01.112
Sep 14 14:01:04 netmsmn qlc: [ID 686697 kern.info] NOTICE: Qlogic qlc(0): Loop ONLINE
Sep 14 14:01:04 netmsmn pcisch: [ID 370704 kern.info] PCI-device: SUNW,qlc@4, qlc0
Sep 14 14:01:04 netmsmn genunix: [ID 936769 kern.info] qlc0 is /pci@8,600000/SUNW,qlc@4
Sep 14 14:01:04 netmsmn genunix: [ID 936769 kern.info] fp0 is /pci@8,600000/SUNW,qlc@4/fp@0,0
Sep 14 14:01:05 netmsmn scsi: [ID 799468 kern.info] ssd0 at fp0: name w500000e010878a41,0, bus address e8
Sep 14 14:01:05 netmsmn genunix: [ID 936769 kern.info] ssd0 is /pci@8,600000/SUNW,qlc@4/fp@0,0/ssd@w500000e010878a
41,0
Sep 14 14:01:05 netmsmn scsi: [ID 365881 kern.info] <SUN72G cyl 14087 alt 2 hd 24 sec 424>
Sep 14 14:01:05 netmsmn genunix: [ID 408114 kern.info] /pci@8,600000/SUNW,qlc@4/fp@0,0/ssd@w500000e010878a41,0 (ss
d0) online
Sep 14 14:01:05 netmsmn scsi: [ID 799468 kern.info] ssd1 at fp0: name w500000e010878c01,0, bus address ef
Sep 14 14:01:05 netmsmn genunix: [ID 936769 kern.info] ssd1 is /pci@8,600000/SUNW,qlc@4/fp@0,0/ssd@w500000e010878c
01,0
Sep 14 14:01:05 netmsmn scsi: [ID 365881 kern.info] <SUN72G cyl 14087 alt 2 hd 24 sec 424>
Sep 14 14:01:05 netmsmn genunix: [ID 408114 kern.info] /pci@8,600000/SUNW,qlc@4/fp@0,0/ssd@w500000e010878c01,0 (ss
d1) online
Sep 14 14:01:05 netmsmn swapgeneric: [ID 308332 kern.info] root on /pci@8,600000/SUNW,qlc@4/fp@0,0/disk@w500000e01
0878c01,0:f fstype ufs
Sep 14 14:01:05 netmsmn pcisch: [ID 370704 kern.info] PCI-device: ebus@5, ebus0
Sep 14 14:01:05 netmsmn ebus: [ID 521012 kern.info] todds12870 at ebus0: offset 1,300070
Sep 14 14:01:05 netmsmn genunix: [ID 936769 kern.info] todds12870 is /pci@8,700000/ebus@5/rtc@1,300070
Sep 14 14:01:05 netmsmn rootnex: [ID 349649 kern.info] mc-us30 at root: SAFARI 0x0 0x400000 ...
Sep 14 14:01:05 netmsmn genunix: [ID 936769 kern.info] mc-us30 is /memory-controller@0,400000
Sep 14 14:01:05 netmsmn rootnex: [ID 349649 kern.info] mc-us31 at root: SAFARI 0x1 0x400000 ...
Sep 14 14:01:05 netmsmn genunix: [ID 936769 kern.info] mc-us31 is /memory-controller@1,400000
Sep 14 14:01:06 netmsmn pcisch: [ID 370704 kern.info] PCI-device: usb@5,3, ohci0
Sep 14 14:01:06 netmsmn genunix: [ID 936769 kern.info] ohci0 is /pci@8,700000/usb@5,3
Sep 14 14:01:06 netmsmn usba: [ID 855233 kern.info] USB-device: device@1, usb_mid0 at bus address 2
Sep 14 14:01:06 netmsmn genunix: [ID 936769 kern.info] usb_mid0 is /pci@8,700000/usb@5,3/device@1
Sep 14 14:01:06 netmsmn usba: [ID 855233 kern.info] USB-device: keyboard@0, hid2 at bus address 2
Sep 14 14:01:06 netmsmn genunix: [ID 936769 kern.info] hid2 is /pci@8,700000/usb@5,3/device@1/keyboard@0
Sep 14 14:01:06 netmsmn usba: [ID 855233 kern.info] USB-device: mouse@1, hid3 at bus address 2
Sep 14 14:01:06 netmsmn genunix: [ID 936769 kern.info] hid3 is /pci@8,700000/usb@5,3/device@1/mouse@1
Sep 14 14:01:06 netmsmn genunix: [ID 408114 kern.info] /pci@8,700000/usb@5,3/device@1/keyboard@0 (hid2) online
Sep 14 14:01:06 netmsmn genunix: [ID 408114 kern.info] /pci@8,700000/usb@5,3/device@1 (usb_mid0) online
Sep 14 14:01:07 netmsmn pcisch: [ID 370704 kern.info] PCI-device: TSI,gfxp@3, gfxp0
Sep 14 14:01:07 netmsmn genunix: [ID 936769 kern.info] gfxp0 is /pci@8,700000/TSI,gfxp@3
Sep 14 14:01:07 netmsmn gfxp: [ID 722914 kern.notice] TSI: gfxp0 is GFX8P @ 1152x900
Sep 14 14:01:07 netmsmn unix: [ID 270833 kern.info] cpu0: UltraSPARC-III+ (portid 0 impl 0x15 ver 0xb0 clock 1200
MHz)
Sep 14 14:01:07 netmsmn unix: [ID 270833 kern.info] cpu1: UltraSPARC-III+ (portid 1 impl 0x15 ver 0xb0 clock 1200
MHz)
Sep 14 14:01:07 netmsmn unix: [ID 721127 kern.info] cpu 1 initialization complete - online
Sep 14 14:01:07 netmsmn ebus: [ID 521012 kern.info] se0 at ebus0: offset 1,400000
Sep 14 14:01:07 netmsmn genunix: [ID 936769 kern.info] se0 is /pci@8,700000/ebus@5/serial@1,400000
Sep 14 14:01:07 netmsmn ebus: [ID 521012 kern.info] su0 at ebus0: offset 1,3062f8
Sep 14 14:01:07 netmsmn genunix: [ID 936769 kern.info] su0 is /pci@8,700000/ebus@5/rsc-control@1,3062f8
Sep 14 14:01:07 netmsmn ebus: [ID 521012 kern.info] su1 at ebus0: offset 1,3083f8
Sep 14 14:01:07 netmsmn genunix: [ID 936769 kern.info] su1 is /pci@8,700000/ebus@5/rsc-console@1,3083f8
Sep 14 14:01:08 netmsmn pcisch: [ID 370704 kern.info] PCI-device: network@5,1, eri0
Sep 14 14:01:08 netmsmn genunix: [ID 936769 kern.info] eri0 is /pci@8,700000/network@5,1
Sep 14 14:01:09 netmsmn genunix: [ID 454863 kern.info] dump on /dev/dsk/c1t0d0s4 size 511 MB
Sep 14 14:01:12 netmsmn pseudo: [ID 129642 kern.info] pseudo-device: devinfo0
Sep 14 14:01:12 netmsmn genunix: [ID 936769 kern.info] devinfo0 is /pseudo/devinfo@0
Sep 14 14:01:13 netmsmn eri: [ID 517527 kern.info] SUNW,eri0 : 100 Mbps full duplex link up
Sep 14 14:01:15 netmsmn /usr/lib/nfs/lockd[190]: [ID 903751 daemon.error] Cannot get address for transport udp hos
t \1 service lockd
Sep 14 14:01:15 netmsmn /usr/lib/nfs/lockd[190]: [ID 128213 daemon.error] Cannot establish NLM service over /dev/u
dp: transport setup problem.
Sep 14 14:01:15 netmsmn /usr/lib/nfs/lockd[190]: [ID 903751 daemon.error] Cannot get address for transport tcp hos
t \1 service lockd
Sep 14 14:01:15 netmsmn /usr/lib/nfs/lockd[190]: [ID 128213 daemon.error] Cannot establish NLM service over /dev/t
cp: transport setup problem.
Sep 14 14:01:15 netmsmn /usr/lib/nfs/lockd[190]: [ID 817159 daemon.error] Could not start NLM service for any prot
ocol. Exiting.
Sep 14 14:01:16 netmsmn syslogd: line 24: WARNING: loghost could not be resolved
Sep 14 14:01:16 netmsmn inetd[173]: [ID 317013 daemon.notice] telnet[226] from 192.9.5.80 50490
Sep 14 14:01:18 netmsmn pseudo: [ID 129642 kern.info] pseudo-device: tod0
Sep 14 14:01:18 netmsmn genunix: [ID 936769 kern.info] tod0 is /pseudo/tod@0
Sep 14 14:01:18 netmsmn pseudo: [ID 129642 kern.info] pseudo-device: pm0
Sep 14 14:01:18 netmsmn genunix: [ID 936769 kern.info] pm0 is /pseudo/pm@0
Sep 14 14:01:19 netmsmn pseudo: [ID 129642 kern.info] pseudo-device: fcode0
Sep 14 14:01:19 netmsmn genunix: [ID 936769 kern.info] fcode0 is /pseudo/fcode@0
Sep 14 14:01:27 netmsmn pseudo: [ID 129642 kern.info] pseudo-device: pm0
Sep 14 14:01:27 netmsmn genunix: [ID 936769 kern.info] pm0 is /pseudo/pm@0
Sep 14 14:01:43 netmsmn picld[63]: [ID 961923 daemon.error] WARNING: Device PS1 failure detected by sensor PS1_FAU
LT_SENSOR
Sep 14 14:02:10 netmsmn pseudo: [ID 129642 kern.info] pseudo-device: devinfo0
Sep 14 14:02:10 netmsmn genunix: [ID 936769 kern.info] devinfo0 is /pseudo/devinfo@0


[Blue]Blue[/Blue] [Dragon]

If I wasn't Blue, I would just be a Dragon...

 

[bluedragon2]

djr111:

automount is running.

showmount -e shows:
showmount -e: hostname: RPC: Program not registered

[Blue]Blue[/Blue] [Dragon]

If I wasn't Blue, I would just be a Dragon...

 

[djr111]

if you rup your own machine, you get a response back, I know you said RPC is running, but it does not mean it is not hung. I have seem this many of times, and basically had to do a 'pkill -HUP inet' to get rpc to respond back.

are you sharing out FS over nfs: /etc/dfs/dfstab?

is statd, lockd, mountd and nfsd running, the first to for nfs.client and second to for nfs.server to run. I see an issue pertaining to lockd in your messages, meaning nfs.client might be having an issue.


Can you also check the /etc/services to make sure you have the following entries




nfsd 2049/udp nfs # NFS server daemon (clts)
nfsd 2049/tcp nfs # NFS server daemon (cots)

lockd 4045/udp # NFS lock daemon/manager
lockd 4045/tcp



then you might want to restart nfs.client and nfs.server

/etc/init.d/nfs.client stop then start
/etc/init.d/nfs.server stop then start

 

[bluedragon2]

not running nfs

statd, lockd, and nfsd are not running

automountd is running

I did notice in the messages log:

Sep 14 14:01:43 netmsmn picld[63]: [ID 961923 daemon.error] WARNING: Device PS1 failure detected by sensor PS1_FAULT_SENSOR

Not sure what that is yet...

[Blue]Blue[/Blue] [Dragon]

If I wasn't Blue, I would just be a Dragon...

 

[djr111]

also, if you stop nfs.xxxx server, do a ps -ef |grep xxxx to truly make sure all the processes have dies. I have also seen where lockd gets stubborn and does not want to die. if it does not die, you can not respawn it back to its normal state.


xxx = statd, lockd, mountd, nfsd

 

[djr111]

i think you need at least 'statd' and l'ockd' running if you are using autmounter to mount your homedirs upon login.

Those should be default processes started upon booting up of the server, unless you have specifically commented them out in the /etc/services (as I ask you to check previously)

The other two processes, are mainly if you are going to share NFS from said server.

 

[bluedragon2]

All I have in my /etc/services is:
ftp 21/tcp
telnet 23/tcp
listener 2766/tcp

Here is a list of processes running:

UID PID PPID C STIME TTY TIME CMD
root 0 0 0 14:25:38 ? 0:01 sched
root 1 0 0 14:25:40 ? 0:00 /etc/init -
root 2 0 0 14:25:40 ? 0:00 pageout
root 3 0 0 14:25:40 ? 0:01 fsflush
root 337 1 0 14:25:57 ? 0:00 /usr/lib/saf/sac -t 300
root 341 332 0 14:25:58 ? 0:02 /usr/openwin/bin/Xsun :0 -nobanner -auth /var/dt/A:0-c4aGPa
root 368 367 0 15:13:39 ? 0:00 /bin/ksh /usr/dt/bin/Xsession
root 149 1 0 14:25:48 ? 0:00 /usr/sbin/rpcbind
root 438 430 0 15:13:44 ?? 0:00 /usr/dt/bin/dtterm -session dtTxa4Qe -C -ls
root 53 1 0 14:25:43 ? 0:00 /usr/lib/sysevent/syseventd
root 63 1 0 14:25:44 ? 0:00 /usr/lib/picl/picld
root 62 1 0 14:25:44 ? 0:00 devfsadmd
root 173 1 0 14:25:48 ? 0:00 /usr/sbin/inetd -s -t
root 224 1 0 14:25:49 ? 0:00 /usr/sbin/nscd
root 194 1 0 14:25:48 ? 0:00 /usr/lib/autofs/automountd
root 262 258 0 14:25:51 ? 0:00 /usr/sadm/lib/smc/bin/smcboot
root 206 1 0 14:25:49 ? 0:00 /usr/sbin/syslogd
root 243 1 0 14:25:50 ? 0:00 /usr/lib/power/powerd
root 208 1 0 14:25:49 ? 0:00 /usr/sbin/cron
root 230 1 0 14:25:50 ? 0:00 /usr/lib/lpsched
root 328 1 0 14:25:52 ? 10:53 java -cp /opt/netMS/netMS//bin/../lib/bootstrap.jar: -Xverify:none -Djava.awt.h
root 250 1 0 14:25:50 ? 0:00 /usr/lib/utmpd
root 271 1 0 14:25:51 ? 0:00 /usr/lib/efcode/sparcv9/efdaemon
root 258 1 0 14:25:50 ? 0:00 /usr/sadm/lib/smc/bin/smcboot
root 303 1 0 14:25:51 ? 0:00 /usr/sbin/auditd
root 295 1 0 14:25:51 ? 0:00 /usr/local/sbin/sshd
root 343 332 0 14:25:58 ? 0:00 /usr/openwin/bin/fbconsole -d :0
root 340 337 0 14:25:58 ? 0:00 /usr/lib/saf/ttymon
root 319 1 0 14:25:52 ? 0:00 /usr/lib/snmp/snmpdx -y -c /etc/snmp/conf
root 338 1 0 14:25:57 console 0:00 /usr/lib/saf/ttymon -g -h -p netmsmn console login: -T sun -d /dev/console -l
root 330 319 0 14:25:52 ? 0:00 mibiisa -r -p 32773
root 430 416 0 15:13:42 pts/3 0:00 /usr/dt/bin/dtsession
root 332 1 0 14:25:53 ? 0:00 /usr/dt/bin/dtlogin -daemon
root 342 332 0 14:25:58 ? 0:00 /usr/dt/bin/dtlogin -daemon
root 367 342 0 15:13:39 ? 0:00 /usr/dt/bin/dtlogin -daemon
root 382 1 0 15:13:40 ? 0:00 /usr/openwin/bin/speckeysd
root 378 368 0 15:13:40 ? 0:00 /usr/openwin/bin/fbconsole
root 429 1 0 15:13:41 pts/3 0:00 /usr/dt/bin/ttsession
root 413 368 0 15:13:40 pts/3 0:00 /usr/dt/bin/sdt_shell -c unset DT; DISPLAY=:0; /usr/dt/bin/dt
root 416 413 0 15:13:40 pts/3 0:00 -sh -c unset DT; DISPLAY=:0; /usr/dt/bin/dtsession_res -merge
root 415 1 0 15:13:40 ? 0:00 /usr/dt/bin/dsdm
root 437 430 0 15:13:42 ? 0:01 dtwm
root 431 173 0 15:13:42 ? 0:00 rpc.ttdbserverd
root 449 439 0 15:13:44 pts/5 0:00 -sh
root 439 430 0 15:13:44 ?? 0:00 /usr/dt/bin/dtterm -session dt7xa4Ze -C -ls
root 441 1 0 15:13:44 ? 0:00 /bin/ksh /usr/dt/bin/sdtvolcheck -d -z 5 cdrom,zip,jaz,dvdrom,rmdisk
root 450 438 0 15:13:44 pts/4 0:00 -sh
root 484 450 0 15:18:58 pts/4 0:00 ps -ef
root 467 441 0 15:13:54 ? 0:00 /bin/cat /tmp/.removable/notify441


[Blue]Blue[/Blue] [Dragon]

If I wasn't Blue, I would just be a Dragon...

 

[djr111]

are you running Solaris 9 if so, copy my entries of lockd and nfsd into your etc services directory. Or if you have another server to you can view its /etc/services to copy the info.

you would also have to stop and start nfs.client, make sure lockd is dead b4 restarting. It should be since it probably has not been running since you do not have it listed in /etc/services.

you should have alot of entries in the /etc/services, amung them lockd, ssh, telnet..etc. If you do a ls -l /etc/services what is the timestamp, was it modified lately?


do you have backups, can you restore your /etc/services from tape.

 

[bluedragon2]

The /etc/services file is what I created and it is running on an identical server which is running fine.

This is Solaris 8.

There is only one application running on this server and I am to the point where I am going to rebuild.

Not sure what caused this issue, no changes were made to the server. The only thing that was sone to the server other then the application running is a retina scan which I have done many of in the past.

Thanks for everyone's help.

[Blue]Blue[/Blue] [Dragon]

If I wasn't Blue, I would just be a Dragon...

 

[bluedragon2]

Before I rebuild, I am going to try creating a new user account and see what the result is.

[Blue]Blue[/Blue] [Dragon]

If I wasn't Blue, I would just be a Dragon...

 

[bluedragon2]

Created a new user. The users home directory was created with the correct permissions and everything looked good. That user has the same problem...

[Blue]Blue[/Blue] [Dragon]

If I wasn't Blue, I would just be a Dragon...

 

[coffeysm]

What do your /etc/auto_home and /etc/auto_master look like?

 

[bluedragon2]

/etc/auto_home:
+auto_home

/etc/auto_master:

/net -hosts -nosuid,nobrowse
/home auto_home -nobrowse
/xfn -xfn

[Blue]Blue[/Blue] [Dragon]

If I wasn't Blue, I would just be a Dragon...