Linux sftp AUTH Failing
HI could you please help how to resolve this issue. its urgent please
type=USER_AUTH msg=audit(1600654581.504:41364596): pid=23595 uid=0 auid=4294967295 ses=4294967295 msg='op=pubkey acct="user-foor" exe="/usr/sbin/sshd" hostname=? addr=10.132.144.133 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1600654581.504:41364596): pid=23595 uid=0 auid=4294967295 ses=4294967295 msg='op=pubkey acct="user-foor" exe="/usr/sbin/sshd" hostname=? addr=10.132.144.133 terminal=ssh res=failed'
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
thanks Dr. Klahn and David Favor
pam_tally2 showed failures and chage -l <userr> showd the exact issue.
however, I retried again today setting the pwd and it worked. may be I did something wrong first time.
pam_tally2 showed failures and chage -l <userr> showd the exact issue.
however, I retried again today setting the pwd and it worked. may be I did something wrong first time.
a) Is sftp otherwise working correctly for other users?
b) Is someone authorized to use sftp using the username "user-foor"?
c) Is 10.132.144.133 part of your network?
d) If so, have you gone and had a talk with whoever is using that workstation?
e) If not, have you chased down the offending connection and located the intruder?