Linux – Can’t log in locally, but SSH works

linux

I can't log in to the console locally. After logging in, it flashes back to the login prompt. If given a wrong password, it will pause for a couple seconds then give the standard "Login incorrect" response. It affects all accounts: root, my user account, and a new account I made to debug the issue. I can log in via SSH perfectly fine.

/etc/inittab: http://pastie.org/3737435

auth.log:

Apr  6 03:09:01 [hostname] /usr/sbin/crond[1122]: pam_unix(crond:session): session opened for user root by (uid=0)
Apr  6 03:09:01 [hostname] /USR/SBIN/CROND[1122]: pam_unix(crond:session): session closed for user root

Best Answer

First, gather information by inspecting /var/log/messages for any information that may be there.

Next, narrow the scope of your problem down. Log in to SSH and change the interactive shell for a user and see if that changes anything. Try csh or zsh - anything, really. I've heard of SSH not honoring .bashrc files, so perhaps somehow there is a TMOUT=0 variable in there or some other logic that kicks you out immediately (but SSH connections aren't honoring it, which is possible).

Related Solutions

Linux – Copying a large directory tree locally? cp or rsync

I would use rsync as it means that if it is interrupted for any reason, then you can restart it easily with very little cost. And being rsync, it can even restart part way through a large file. As others mention, it can exclude files easily. The simplest way to preserve most things is to use the -a flag – ‘archive.’ So:

rsync -a source dest

Although UID/GID and symlinks are preserved by -a (see -lpgo), your question implies you might want a full copy of the filesystem information; and -a doesn't include hard-links, extended attributes, or ACLs (on Linux) or the above nor resource forks (on OS X.) Thus, for a robust copy of a filesystem, you'll need to include those flags:

rsync -aHAX source dest # Linux
rsync -aHE source dest  # OS X

The default cp will start again, though the -u flag will "copy only when the SOURCE file is newer than the destination file or when the destination file is missing". And the -a (archive) flag will be recursive, not recopy files if you have to restart and preserve permissions. So:

cp -au source dest

Linux – Suspicious password login in sshd log

Well, that's a legit sftp-via-ssh connection from your IP address. Either you've been keylogged, or (more likely in my opinion) you forgot that you set up password-based sftp for some application like DreamWeaver which is automatically logging in to your virtual host to keep its file repository up to date.

Best Answer

Related Solutions

Linux – Copying a large directory tree locally? cp or rsync

Linux – Suspicious password login in sshd log

Related Topic