Re: HELP!!Can't login after reboot!!!

[ABrady <kcsmart kc rr com>]

On Wed, 16 May 2001 17:03:43 +0200 Emma Wermström (EMW)
<Emma Wermstrom emw ericsson se> spake unto us:

> Hi all!
> 
> I hope someone can help me with this!
> 
> I installed RedHat Linux 7.1 several weeks ago and up until now it's
> been working fine.
> I also have Apache 1.3.19 with perl, mod_perl and embperl installed on
> the machine aswell as several other perl modules (apache::authcookie
> etc)
> 
> Today when trying to access my RedHat machine from a remote PC, I
> received a message saying "connection closed by remote host" after
> submitting my credentials.
> 
> I thought I'd reboot my Linux machine to see if that would solve the
> problem and that's when it happened.
> I COULDN'T LOG BACK IN. Not as root and not using any other userid.
> All that happens is that the screen flimmers and then it goes back to
> prompt me for my username and password. I'm sure I have the right userid
> and password.
> PLEASE, help me someone. I've got my master thesis project on that
> machine!!
> Since the last time I rebooted, yesterday, I have only been messing with
> Apache and some modules. The web server was working before I rebooted
> but now I can't access it. I haven't changed any passwords or
> initialization files or anything that has to do with Linux.
> Please help me someone!
> 
> Emma

Rebbot and at the prompt type

	linux single

Then fix the problem by issuing the command

	passwd

That will let you log in. Now you'll need to se what happened to
permissions, services, etc.

While you're at it, you might want to sniff around to see if you've been
hacked. This can happen without being hacked, but it's a good idea to
check it out to be sure you're safe. It doesn't generally happen on its
own. Hacking and adding software are the usual culprits.

Before someone starts going into  a discussion that leads to numerous days
of emails relating to security, lock your box up PHYSICALLY or take a huge
chance and put a password on lilo. If the latter fails, though, reinstall
rapidly becomes the only option left. The backdoor is still the best
possible alternative to reinstallation.

-- 
Secret hacker rule #11: hackers read manuals.