PAM: Authentication failure for root
Issue
Root is unable to login and following is logged in /var/log/secure
Sep 6 11:20:33 ieavu27 sshd[7802]: Connection from 10.68.132.21 port 53817 on 10.68.26.207 port 22
Sep 6 11:20:41 ieavu27 sshd[7802]: reverse mapping checking getaddrinfo for l007111.iehibdom.com [10.68.132.21] failed - POSSIBLE BREAK-IN ATTEMPT!
Sep 6 11:20:41 ieavu27 sshd[7802]: Postponed keyboard-interactive for root from 10.68.132.21 port 53817 ssh2 [preauth]
Sep 6 11:20:48 ieavu27 sshd[7802]: error: PAM: Authentication failure for root from 10.68.132.21
Sep 6 11:20:48 ieavu27 sshd[7802]: Failed keyboard-interactive/pam for root from 10.68.132.21 port 53817 ssh2
Sep 6 11:20:48 ieavu27 sshd[7802]: Postponed keyboard-interactive for root from 10.68.132.21 port 53817 ssh2 [preauth]
Environment
- Red Hat Enterprise Linux 7.x
- PAM
- SSHD
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.