Only root is able to login

[Matthew Seaman]

On Thu, Aug 05, 2004 at 10:20:18AM +0200, Thomas Krause wrote:
> Hello,
> I've a big problem, that only root is able to login to a new FreeBSD 5.2.1
> box. Neither login nor su works. I've no local access to the machine.
> A ftp-login is possible for normal users.

For the sake of the archives, I will point out:

    http://www.freebsd.org/doc/en_US.ISO8859-1/books/faq/admin.html#SU-WHEEL-GROUP

which is the usual cause of this sort of thing, but apparently not in
this case.
 
> mdm-online:/ # su - abc
> su: /bin/sh: Permission denied
> 
> mdm-online:/ # login abc
> Password:
> Copyright (c) 1992-2004 The FreeBSD Project.
> Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
>         The Regents of the University of California. All rights reserved.
> 
> FreeBSD 5.2.1-RELEASE-p9 (MDM-ONLINE) #1: Mon Jul 26 22:24:58 CEST 2004
> 
> Welcome to FreeBSD!
> 
> login: /bin/sh: No such file or directory

At a guess: both login(1) and su(1) are meant to be SUID programs:

    % ls -la /usr/bin/su /usr/bin/login
    -r-sr-xr-x  1 root  wheel  21824 Jun  6 14:29 /usr/bin/login*
    -r-sr-xr-x  1 root  wheel   8200 Jun  6 14:29 /usr/bin/su*

They won't work without that SUID bit.  Sounds to me as if someone has
been a bit heavy handed trying to lock down the system.  Or else the
system was installed by copying from somewhere else, but using a
method which automatically drops SUID and similar bits.

	Cheers,

	Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.                       26 The Paddocks
                                                      Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey         Marlow
Tel: +44 1628 476614                                  Bucks., SL7 1TH UK
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20040805/b3bdd156/attachment.bin