Solaris 10 auth issue

Very strange one, we've got a recently build server (Sol10 via JET flash).

Bascially you can ssh to it fine, but telnet will allow entry of username, but will then feed in a carriage return on the passwd field, this also happens on any auth type command, ie passwd on a user account will also feed in CR's!! I've seen this ages ago but cannot remember what caused it, any info appreciated :slight_smile:

A snippet of truss on passwd command:

sigaction(SIGINT, 0xFFBFB7B8, 0xFFBFB858) = 0
ioctl(3, TCGETA, 0xFFBFB8FC) Err#6 ENXIO
ioctl(3, TCSETAF, 0xFFBFB8FC) Err#6 ENXIO
New Password: write(2, " N e w P a s s w o r d".., 14) = 14
read(3, 0xFF1EC27C, 1) = 0
ioctl(3, TCSETAW, 0xFFBFB8FC) Err#6 ENXIO

write(2, "\n", 1) = 1
sigaction(SIGINT, 0xFFBFB7B8, 0xFFBFB858) = 0
close(3) = 0
getuid() = 0 [0]
open("/dev/tty", O_RDONLY) = 3
fstat64(3, 0xFFBFB740) = 0
sigaction(SIGINT, 0xFFBFB7B8, 0xFFBFB858) = 0
ioctl(3, TCGETA, 0xFFBFB8FC) Err#6 ENXIO
ioctl(3, TCSETAF, 0xFFBFB8FC) Err#6 ENXIO
Re-enter new Password: write(2, " R e - e n t e r n e w".., 23) = 23
read(3, 0xFF1EC27C, 1) = 0
ioctl(3, TCSETAW, 0xFFBFB8FC) Err#6 ENXIO

write(2, "\n", 1) = 1

Notice the \n writes!! where the hell do these come from !!!.

Ta...

It looks like a terminal settings problem. I sometimes see that on system controllers for 4900/6900. Try substituting ^M for return when entering the username.

Reborg,

Thanks for reply, actually just sussed....

It ended up comparing 'truss's from another box on the passwd command and found a number of Err#6 ENXIO in various places, basically it seemed unable to properly access the TTY, so a quick check of /dev/tty showed:

lrwxrwxrwx 1 root root 9 Sep 6 14:41 tty -> /dev/null

Which isnt normal, changed to :

lrwxrwxrwx 1 root other 26 Jul 31 14:09 tty -> ../devices/pseudo/sy@0:tty

and bingo :slight_smile:

This link is not normal (obviously). Has anyone been accessing your box with authorization? Check your logs.

Hunting down access/histories now its fixed...sneaky move though :frowning: