Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Adding a ssh-only user account




On Jul 24, 2008, at 10:43 AM, R.L. Grigg wrote:


On Jul 23, 2008, at 9:33 PM, R.L. Grigg wrote:

I'm trying to add a user account to our OSXS 10.5.4 server. All this user is allowed to do is ssh in. What is the best way to add such an account? Shouldn't going through System Preferences -> Users be sufficient? When I add the user account this way and try to ssh into it, the password is not recognized and the system log says:

Jul 23 21:30:38 /usr/sbin/PasswordService[62]: client response doesn't match what we generated
Jul 23 21:30:38: --- last message repeated 1 time ---
Jul 23 21:30:38 emond[72]: Host at by will be blocked for at least 15.00 minutes
Jul 23 21:30:38 emond[1048]: DoRunAction (child): setting the uid/ gid to 0/0


What am I doing wrong?

A little more info on this...

Im trying to create a local user on our server. I go into Workgroup Manager, authenticate to /Local/Default, then click on New User, and fill out the username (jsmith) and password fields and click Save. It appears to work. But when attempting to log in as that user, the password is not accepted. The log file has this:

Jul 24 10:32:58 emond[72]: Host at by will be blocked for at least 15.00 minutes
Jul 24 10:32:58 emond[5760]: DoRunAction (child): setting the uid/ gid to 0/0
Jul 24 10:32:59 emond[72]: Host at jsmith will be blocked for at least 15.00 minutes
Jul 24 10:32:59 emond[5763]: DoRunAction (child): setting the uid/ gid to 0/0
Jul 24 10:32:59 emond[72]: Host at jsmith will be blocked for at least 15.00 minutes
Jul 24 10:32:59 emond[5766]: DoRunAction (child): setting the uid/ gid to 0/0


Im no expert at this, so any words of advice will be most appreciated!

It appears OSXS is really confused. I just discovered that when I attempt to log in to the new user account, the ownership of /Users changes to that account!


Before:

$ ls -led /Users
drwxr-xr-x@ 16 root   admin   544 July 24 10:32 /Users

After login attempt ('You are unable to log in to the user account "jsmith" at this time'):

$ ls -led /Users
drwxr-xr-x@ 16 jsmith nobody  544 July 24 10:32 /Users

Odd thing is that jsmith is staff, not nobody.
Russ


_______________________________________________ Do not post admin requests to the list. They will be ignored. Macos-x-server mailing list (email@hidden) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/macos-x-server/email@hidden

This email sent to email@hidden
References: 
 >Adding a ssh-only user account (From: "R.L. Grigg" <email@hidden>)
 >Re: Adding a ssh-only user account (From: "R.L. Grigg" <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.