This workstation compromised... Not sure how, but...

[Fraser Campbell]

On Wednesday 15 November 2006 18:04, Scott Elcomb wrote:

> I'm certainly open to any ideas.  Here's what I know so far:
>
> #1 - On boot, non-root user id/passwd that has been in use for > 1
> year is not working.
>
> #2 - Using a virtual console, login as root and running passwd for the
> workstation id, changed passwd for workstation id.
>
> #3 - New password does _not_ work for associated id.
>
> #4 - New password _does work_ for root.

What do the logs say?

-- 
Fraser Campbell <fraser-Txk5XLRqZ6CsTnJN9+BGXg at public.gmane.org>                 http://www.wehave.net/
Georgetown, Ontario, Canada                               Debian GNU/Linux
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists