RE: [cobalt-users] cant login telnet

[flash22@xxxxxxx]

On Mon, 26 Mar 2001, Benjamin Charles Tehan wrote:

> Yeah, I know it's either hacked which is a sure bet or there idiot admins
> are at it again.
> 
> My only thought was to some how edit the init scripts with an installation
> of ssh and reset the server and hope for the best.

Best bet, if they have been playing, don't overlook the possibility they
simply filled /var and choked it ;)

Or played with the passwd file and got it out of sync with the shadow file
(PAM gets very upset about this)
> 
> I have got the logs I could retrieve but I cannot view the bash history,
> which is a shame as it would tell me an awful lot.

find / for timestamps will tell you all kinds of interesting things too ;)

> They are going to pay big for this fix, teach them not to play with things
> they don't understand.

Confused customers can be very profitible lol

> 
> If any one has any other ideas would be good if you people could give me a
> yell.

gsh