Re: [SLUG] Pulling hair out...

From: Chuck Hast (wchast@gmail.com)
Date: Wed Jun 15 2005 - 18:26:55 EDT


On 6/15/05, Eben King <eben1@tampabay.rr.com> wrote:
> On Wed, 15 Jun 2005, Chuck Hast wrote:
>
> > On 6/15/05, Eben King <eben1@tampabay.rr.com> wrote:
> > > On Wed, 15 Jun 2005, Chuck Hast wrote:
> > >
> > > > Here is a who -u
> > > > root@fpac:/etc/ax25# who -u
> > > ...
> > > > fpacuser pts/1 Jun 15 07:54 . 1419
> > >
> > > > Below is the "ps axfww | less -S"
> > > > root@fpac:/etc/ax25# ps axfww
> > > > PID TTY STAT TIME COMMAND
> > > ...
> > > > 254 ? S 0:00 /usr/sbin/sshd
> > > > 1576 ? S 0:00 \_ sshd: root@pts/1 <---
> > > > 1578 pts/1 S 0:00 \_ -bash
> > > > 1652 pts/1 R 0:00 \_ ps axfww
> > >
> > > Are these from the same login session?
> > >
> > > You also need to mind out what _is_ being run when fpacuser SSHes in ("echo
> > > $$" etc).
> > >
> > OK, one thing, I am ssh'ing into this machine as it is over in Ft Pierce.
> > The guy who operates it is not that hot on Linux yet so I am doing all
> > of this remotely.
>
> That adds a degree of difficulty, true. It's nowhere near as hard or
> insecure as some other OSes.
>
> > I assume that I need to be on a console and when the login to fpacuser
> > happens I need to do the echo $$...
>
> No, because that'll tell you the PID of _your_ shell. It needs to be run by
> the user with the problem. Except...
>
> > Only thing is as soon as you do the password it kills the whole thing,
>
> Try SSHing in as fpacuser from a concole, or some terminal that doesn't
> close as soon as ssh exits. There might be some useful message like "cannot
> find <something>" that prints just before ssh exits.
>
> > there is the one that sets around as you can see from the 'who -u' but I
> > can not find out anything else the pid that is shown by the who command
> > appears not to exist.
>
> [uw]tmp is messed up?
>
> See if you can run:
>
> ssh fpacuser@that_host what_it's_supposed_to_run
>

Remember that this login dumps me to a special program that is the front
end of a ham radio app. I can not execute any linux/unix commands from
it. Of course when I execute the echo $$ from another consol or ssh session
I get that session PID. But when I do the ps command I can see at least
on the good machine where things are for the fpacuser.

-- 
Chuck Hast 
To paraphrase my flight instructor;
"the only dumb question is the one you DID NOT ask resulting in my going
out and having to identify your bits and pieces in the midst of torn
and twisted metal."

----------------------------------------------------------------------- This list is provided as an unmoderated internet service by Networked Knowledge Systems (NKS). Views and opinions expressed in messages posted are those of the author and do not necessarily reflect the official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 20:12:42 EDT