Account Issues

Node lets you enter password and then kicks you off without prompt

[TonjesAir:~] belt% ssh -X -Y hepcms-in2.umd.edu

belt@hepcms-in2.umd.edu's password:

Connection closed by 128.8.216.193

Solution: login as root, and check authconfig-tui (NIS settings), ensure they are what we expect from NIS page, in this case I found LDAP authentication was checked. Fixed.

Node doesn't let you enter password, just ssh closed - Denyhosts block

• Probably been denyhosts blocked. As root on the head node, look at the instructions in cronscripts/DenyHostsInstructions.txt, find the offending IP (yours our users) with whatismyip.com reports (their network setting won't help as it often is a LAN, not WAN). Then go to the node which blocked them and fix the problem following our secured instructions, a *few* but not all key points below:

  • Note that each node (head node, in1, in2, sl5) has its own version of denyhosts running so you have to make these changes *on that node*

  • Make sure in /var/log/secure this was a valid OUR USER error and not a potential hacker

  • Note that you will have to remove the IP from a LOT of files, not just /etc/hosts.deny, so pay attention to the directions carefully

  • I think you also have to remove it from /var/log/secure* on the node before restarting denyhosts, please pay attention to that in the instructions

  • After restarting denyhosts, wait ~5-10 minutes to see if the IP got blocked again, if so, start over and

• If you cannot get to the head node, go through some other site you have access to

• The file is also downloaded below, please make sure the version on the HN and this one stays in sync if you change it.

Can SSH from Lxplus but not directly to T3

in .ssh/config, PasswordAuthentication was set to "Off", so I have now changed it to "On" and I can log in without any trouble.

public_html web dir not visible

First check is to see if the /home user has 755 permissions and so does public_html (rwx-r-x-r-x)

Then check the logfile

[root@hepcms-hn ~]# grep 'yhshin' /etc/httpd/logs/error_log

[Thu Mar 02 01:05:41 2017] [alert] [client 108.51.29.40] /home/yhshin/public_html/.htaccess: Options not allowed here

looking at the .htaccess file we see it has an extra option

[root@hepcms-hn httpd]# cat /export/home/yhshin/public_html/.htaccess

Options +Indexes

[root@hepcms-hn httpd]# cat /export/home/jabeen/public_html/.htaccess

commenting Options -Indexes solved the issue.