-OxEdaN- Posted January 19, 2018 Report Share Posted January 19, 2018 (edited) Salutare. Am probleme pe un vps la schimbarea parolei. Am sesizat că a fost cineva pe server și mi-a lăsat niște "cadouri" cum ar fi un silent miner, un perl bot și nu am idee dacă și un sniffer/backdoor ceva. Într-un final am reușit să scap de miner și perlbot care erau vizibile dar a șters și fișierele lăsând unul singur din lib64/security și nu mai pot schimba parolele. Iar mai jos privind în log/secure fișierele lipsă!.. Aveți idee de unde pot recupera fișierele lipsă pentru aceea versiune? Spoiler Jan 19 21:21:01 Oxedan crond[10282]: PAM unable to dlopen(/lib64/security/pam_access.so): /lib64/security/pam_access.so: cannot open shared object file: No such file or directory Jan 19 21:21:01 Oxedan crond[10282]: PAM adding faulty module: /lib64/security/pam_access.so Jan 19 21:21:01 Oxedan crond[10282]: PAM unable to dlopen(/lib64/security/pam_unix.so): /lib64/security/pam_unix.so: cannot open shared object file: No such file or directory Jan 19 21:21:01 Oxedan crond[10282]: PAM adding faulty module: /lib64/security/pam_unix.so Jan 19 21:21:01 Oxedan crond[10282]: PAM unable to dlopen(/lib64/security/pam_localuser.so): /lib64/security/pam_localuser.so: cannot open shared object file: No such file or directory Jan 19 21:21:01 Oxedan crond[10282]: PAM adding faulty module: /lib64/security/pam_localuser.so Jan 19 21:21:01 Oxedan crond[10282]: PAM unable to dlopen(/lib64/security/pam_succeed_if.so): /lib64/security/pam_succeed_if.so: cannot open shared object file: No such file or directory Jan 19 21:21:01 Oxedan crond[10282]: PAM adding faulty module: /lib64/security/pam_succeed_if.so Jan 19 21:21:01 Oxedan crond[10282]: PAM unable to dlopen(/lib64/security/pam_permit.so): /lib64/security/pam_permit.so: cannot open shared object file: No such file or directory Jan 19 21:21:01 Oxedan crond[10282]: PAM adding faulty module: /lib64/security/pam_permit.so Jan 19 21:21:01 Oxedan crond[10282]: PAM unable to dlopen(/lib64/security/pam_loginuid.so): /lib64/security/pam_loginuid.so: cannot open shared object file: No such file or directory Jan 19 21:21:01 Oxedan crond[10282]: PAM adding faulty module: /lib64/security/pam_loginuid.so Jan 19 21:21:01 Oxedan crond[10282]: PAM unable to dlopen(/lib64/security/pam_keyinit.so): /lib64/security/pam_keyinit.so: cannot open shared object file: No such file or directory Jan 19 21:21:01 Oxedan crond[10282]: PAM adding faulty module: /lib64/security/pam_keyinit.so Jan 19 21:21:01 Oxedan crond[10282]: PAM unable to dlopen(/lib64/security/pam_limits.so): /lib64/security/pam_limits.so: cannot open shared object file: No such file or directory Jan 19 21:21:01 Oxedan crond[10282]: PAM adding faulty module: /lib64/security/pam_limits.so Jan 19 21:21:01 Oxedan crond[10282]: PAM unable to dlopen(/lib64/security/pam_env.so): /lib64/security/pam_env.so: cannot open shared object file: No such file or directory Jan 19 21:21:01 Oxedan crond[10282]: PAM adding faulty module: /lib64/security/pam_env.so Jan 19 21:21:01 Oxedan crond[10282]: PAM unable to dlopen(/lib64/security/pam_deny.so): /lib64/security/pam_deny.so: cannot open shared object file: No such file or directory Jan 19 21:21:01 Oxedan crond[10282]: PAM adding faulty module: /lib64/security/pam_deny.so Edited January 19, 2018 by -OxEdaN- Quote Link to comment Share on other sites More sharing options...
iulik Posted January 19, 2018 Report Share Posted January 19, 2018 apt-get install libpam-cracklib Quote Link to comment Share on other sites More sharing options...
-OxEdaN- Posted January 19, 2018 Author Report Share Posted January 19, 2018 5 minutes ago, ManutaDeAur said: apt-get install libpam-cracklib E CentOS... Am încercat și varianta yum -y install pam dar la sfârșit îmi dă fail când să instaleze și cracklib-ul.. Quote Link to comment Share on other sites More sharing options...
gogusan Posted January 19, 2018 Report Share Posted January 19, 2018 (edited) /etc/shadow exista? daca nu exista creaza-l cu: http://man7.org/linux/man-pages/man8/pwconv.8.html si apoi incearca iar passwd Edited January 19, 2018 by gogusan Quote Link to comment Share on other sites More sharing options...
-OxEdaN- Posted January 20, 2018 Author Report Share Posted January 20, 2018 Există și shadow, e la locul lui.. Quote Link to comment Share on other sites More sharing options...
iulik Posted January 20, 2018 Report Share Posted January 20, 2018 (edited) Dai yum list *pam* rpm -qa *pam* si spune-mi ce iti returneaza p.s: ce versiune de centos e? un yum update ar trebui sa-ti rezolve problemele daca e centos 6.8 Edited January 20, 2018 by ManutaDeAur Quote Link to comment Share on other sites More sharing options...
-OxEdaN- Posted January 20, 2018 Author Report Share Posted January 20, 2018 Versiunea și kernelu sunt în poză. Am dat update urmat de upgrade și nimic. Quote Link to comment Share on other sites More sharing options...