How do I unlock a specific user for telnet?

Guys! First, thanks for your attempt to help - I really appreciate it.

Now... I didn't say that I am telneting as root. I only asked how to
unlock a *specific* user from the inablity to *telnet*.

That is:
1) I have root access to the system.
2) Only one userid ('lynn') is barred from telneting.
3) That userid has no problem logging in from the console.
That is, it is *not totally* locked, but rather locked only
for telnet: "Authenticaton failure".
4) Other normal userids have no problem telneting.

I checked the man page for passwd, but it only mentions
locking/unlocking an account completely.

Any ideas?

Thanks,
Lynn


linuxlover992000@yahoo.com (Linux Lover) wrote in message news:<7687bfbd.0409131017.4381aeef@posting.google. com>...
> Running RedHat 9, I am able to log in as root, but I cannot telnet
> using the single user account I defined in the system. As root, I
> reset the password (using passwd) for that userid, but this doesn't
> help - I still cannot telnet into the system using that single user
> account.
>
> I created a new (different) user account. No problem - this one is
> able to telnet without any problem from the same exact host.
>
> It seems that the first userid got "locked" for some reason, and now
> telnet refuses authentication to that userid only.
>
> My question is: how do I unlock it?
>
> Thanks,
> Lynn

linuxlover992000@yahoo.com (Linux Lover) wrote in
news:7687bfbd.0409140819.ce7c4ed@posting.google.co m:

> 2) Only one userid ('lynn') is barred from telneting.
> 3) That userid has no problem logging in from the console.
> That is, it is *not totally* locked, but rather locked only
> for telnet: "Authenticaton failure".
> 4) Other normal userids have no problem telneting.

A difference between console login or tty login?
Hmmmm is there a term setting in the users profile which is not working?
Do you use IP addresses in the host.allow and host.deny file?
What do the logs show about the request?

Gandalf Parker
-- What security shall do,
the search for "easy administration" shall undo.

On 14 Sep 2004 09:19:37 -0700, Linux Lover <linuxlover992000@yahoo.com> wrote:
> Guys! First, thanks for your attempt to help - I really appreciate it.
> Now... I didn't say that I am telneting as root. I only asked how to
> unlock a *specific* user from the inablity to *telnet*.
> That is:
> 1) I have root access to the system.
> 2) Only one userid ('lynn') is barred from telneting.
> 3) That userid has no problem logging in from the console.
> That is, it is *not totally* locked, but rather locked only
> for telnet: "Authenticaton failure".
> 4) Other normal userids have no problem telneting.

Given all this, there are three possible sources of problems, in order
from most to least likely:

1. Which telnet client is 'lynn' using? (Same as those who can telnet?
Doing something funny to password characters as they are typed?
Strange telnet protocol negotiation problem?, etc.)

2. From where is 'lynn' trying to telnet in? (IP denied by
/etc/hosts.deny, firewall or other mechanism? Path is very noisy and
error-inducing so that password cannot be correctly sent? Path is
corrupting characters for other reasons?, etc.)

3. Special problem for this user in an unexpected place, the most
unlikely scenario. (Special code in telnet server for this user?
Special code in firewall?, etc.)

Make a list of all possible points of error and then knock down each
one with a definitive test.

Anything useful in /var/log/messages or /var/log/secure?

--
Dale Dellutri <ddelQQQlutr@panQQQix.com> (lose the Q's)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 2004-09-14, Linux Lover <linuxlover992000@yahoo.com> wrote:
>
> Now... I didn't say that I am telneting as root. I only asked how to
> unlock a *specific* user from the inablity to *telnet*.

The question remains, however: why not ssh?

> 3) That userid has no problem logging in from the console.
> That is, it is *not totally* locked, but rather locked only
> for telnet: "Authenticaton failure".
> 4) Other normal userids have no problem telneting.

What do your logs say? On RH9, you can probably look at
/var/log/secure or /var/log/messages.

- --keith

- --
kkeller-usenet@wombat.san-francisco.ca.us
(try just my userid to email me)
AOLSFAQ=http://wombat.san-francisco.ca.us/cgi-bin/fom

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBR8WDhVcNCxZ5ID8RAg/5AJkB7Iv/oZfGuLqkd2j0KK+Dy3o/mACfbgiI
WCUq9PP5mvq2AFHPeTYMTNY=
=UwJ+
-----END PGP SIGNATURE-----