Skip site navigation (1)Skip section navigation (2)
Date:      09 Mar 2006 09:46:24 -0500
From:      Lowell Gilbert <freebsd-questions-local@be-well.ilk.org>
To:        Dave <dmehler26@woh.rr.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: strange message in logs, ssh breakin?
Message-ID:  <44u0a71xrz.fsf@be-well.ilk.org>
In-Reply-To: <004401c6427b$42d60250$0200a8c0@satellite>
References:  <004401c6427b$42d60250$0200a8c0@satellite>

next in thread | previous in thread | raw e-mail | index | archive | help
"Dave" <dmehler26@woh.rr.com> writes:

> Hello,
>     I've recently started seeing this in my security logs. This is on
> a freebsd6 box. Is this some kind of hack atempt?
> Thanks.
> Dave.
> 
> Mar  5 12:16:59 zeus sshd[33617]: login_getclass: unknown class 'root'
> Mar  5 12:17:03 zeus sshd[33621]: login_getclass: unknown class 'root'
> Mar  5 12:18:02 zeus sshd[33622]: fatal: Timeout before authentication
> for 195.225.129.68

By default, sshd won't allow root to log in.  Also by default, root
uses the "root" login class in login.conf (which exists by default).  

Make sure that those defaults are still present, unless you know
exactly why you want to change them.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44u0a71xrz.fsf>