-
Título
Usernames over 8 characters cannot login via SSH, telnet, login, or ftp on HP-UX HPUX -
Descrição
A username that is greater than 8 characters is unable to login to hpux system prior to 11iv3 (11.31) via SSH, telnet, login, or ftp
The PAM debug or sshd debug files show a similiar error to the below:
sshd[19985]: error: PAM: No account present for user.
sshd[3420]: fatal: PAM: pam_setcred(): No account present for user
-
Causa
3rd Party character length issue. HP-UX 11.23 has an 8 character limit for the username. QAS does not adhere to the limits; however, underlining PAM authentication libraries and HP-UX utilities do.
-
Resolução
WORKAROUND:
Use a "user-override" file to override the usernames to less than 8 characters.
For example
more /etc/opt/quest/vas/user-override
longusername@yourdomain.com:shortnam:::::
Would allow the longusername@yourdomain.com user to log on with the username shortnam instead.RESOLUTION 1:
Use login names < 9 characters
RESOLUTION 2:
Upgrade to HPUX 11.31 which allows login names up to 255 characters
For more information about this issue please refer to the following HP Support document:
http://h10025.www1.hp.com/ewfrf/wc/document?docname=c01096261&lc=en
-
Informações adicionais
COMMANDS TO TROUBLESHOOT:/opt/quest/bin/vastool nss getpwnam <username> returns the correct user information
/opt/quest/bin/vastool nss getpwuid <UID> returns the correct user information
/opt/quest/bin/vastool list user <username> returns the correct user information
id <username> returns the correct user information