Re: brute force ssh attempt mitigation

[Olav Vitters <olav vitters nl>]

On Wed, Mar 31, 2010 at 08:39:57AM -0600, Christer Edwards wrote:
> On Wed, Mar 31, 2010 at 8:36 AM, Olav Vitters <olav vitters nl> wrote:
> > No, /etc/passwd + /etc/shadow entries are only for sysadmins, and only
> > to ensure sudo access. Login is still done using key based
> > authentication (it is copied from LDAP every hour). In case LDAP is
> > down, the old SSH key will still be available (latest create-auth
> > versions).
> >
> > Normal users should not be in /etc/passwd.
> 
> This create-auth? (from puppet.gnome.org Cron emails)
> 
> /etc/cron.hourly/create-auth: line 2: /home/admin/bin/create-auth:
> Permission denied

Yes.

Error message is due to the NFS mounts on puppet being broken
(/home/admin, /home/users). You can still log in though (aside from home
dir not existing complaints)

-- 
Regards,
Olav