I've done the rpm -V passwd and there was no damage reported. I'll try checking all installed packages when I get back to work tomorrow. Great suggestion. Thanks.
There is no other sign of hacking. Nothing in the log watch emails, no unusual behavior. I just thought it looked like someone might have the root password and that they are preventing me from changing it. Interestingly, I WAS able to change the root password using KDE's graphical user manager utility. I also changed my password in the same way and I've shut the server down. Also interestingly, I was able to change a password for a user account from one of the client machines in the lab which are running 8.0 while the server is running 7.3. I was able to run passwd and yppasswd from the clients without error while logged into a client that uses NIS for authentication. Wierd, huh? Thanks again for the help. Steve On Mon, 2002-12-02 at 21:36, Michael Schwendt wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 02 Dec 2002 20:56:21 -0600, Steve Strong wrote: > > > The problem is I can't run passwd. > > Find out which package is broken. First check the "passwd" package: > > $ rpm -V passwd > > Re-install it if it's damaged. > > Better check all your installed packages, e.g. like this: > > $ su -l root > # rpm -qa | xargs -n 1 -t rpm -V &> rpm-Va.txt > # less rpm-Va.txt > > Look out for modified files in security relevant packages. > > What else makes you believe you've been hacked? Log entries maybe? > Other occurances of strange or unexpected behaviour? > > > I have installed every update that Red Hat has issued for my 7.3 > > server within 24hrs of getting a notice. > > What services have you had enabled? > > - -- > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.0.6 (GNU/Linux) > > iD8DBQE97Ca50iMVcrivHFQRAgHZAJ9oR6xvuz7Z3YMN+E8r6ataULO7hgCfTQP2 > BZL3pmFJMvpjAXURkCFMv54= > =AoX7 > -----END PGP SIGNATURE----- > > > > -- > redhat-list mailing list > unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe > https://listman.redhat.com/mailman/listinfo/redhat-list > -- Steve Strong Computer Science Teacher Washington High School 2205 Forest Dr. SE Cedar Rapids, IA 52403 mailto: [EMAIL PROTECTED] website: http://crwash.org telephone: 319-398-2161 -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list
