From owner-freebsd-questions@FreeBSD.ORG Sat Oct 16 11:03:38 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6D1D81065670 for ; Sat, 16 Oct 2010 11:03:38 +0000 (UTC) (envelope-from frederic.praca@freebsd-fr.org) Received: from smtpfb1-g21.free.fr (smtpfb1-g21.free.fr [212.27.42.9]) by mx1.freebsd.org (Postfix) with ESMTP id 1077C8FC18 for ; Sat, 16 Oct 2010 11:03:36 +0000 (UTC) Received: from smtp4-g21.free.fr (smtp4-g21.free.fr [212.27.42.4]) by smtpfb1-g21.free.fr (Postfix) with ESMTP id 1814377C4ED for ; Sat, 16 Oct 2010 12:45:04 +0200 (CEST) Received: from coruscant.dnsalias.net (unknown [88.169.125.217]) by smtp4-g21.free.fr (Postfix) with ESMTP id 02BF84C80E5 for ; Sat, 16 Oct 2010 12:44:57 +0200 (CEST) Date: Sat, 16 Oct 2010 12:47:25 +0200 From: Frederic Praca To: freebsd-questions@freebsd.org Message-ID: <20101016124725.63a7ac5a@coruscant.dnsalias.net> X-Mailer: Claws Mail 3.7.6 (GTK+ 2.20.1; i386-portbld-freebsd8.1) Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Subject: Strange PAM message X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Oct 2010 11:03:38 -0000 Hello guys, has anyone got these messages : Oct 16 11:24:54 coruscant sshd[2690]: User root from 89.211.244.245 not allowed because none of user's groups are listed in AllowGroups Oct 16 11:24:55 coruscant sshd[2690]: fatal: Internal error: PAM auth succeeded when it should have failed FYI, I have a sshd server prohibiting root logins so the second log made me think about a possible break-in attempt and maybe a succeeding one :-( Any idea about what these messages mean ? Fred --=20 Ce serait beau, l'honnetet=E9 d'un avocat qui demanderait la condamnation de son client ! -+- Jules Renard -+-