LINUX普通用户登陆报错

最新推荐文章于 2025-03-21 10:44:11 发布

原创最新推荐文章于 2025-03-21 10:44:11 发布 · 4.4k 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#linux

基础架构专栏收录该内容

6 篇文章

订阅专栏

本文记录了在初始化后的LINUX系统中，新建用户尝试登录时遇到的Connection closed错误。通过检查/var/log/secure日志，发现PAM账户配置导致的访问拒绝。问题根源在于/etc/security/access.conf文件的特定行，这些行限制了某些IP地址的访问。通过注释掉相关配置行，用户成功登录。解决方案是使用sed命令对access.conf文件进行修改。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

1，刚初始化后的LINUX主机，新建用户后登陆报Connection closed

hadoop@cnsz0804's password:
Connection closed by 10.12.25.114

2，检查/var/log/secure发现如下报错

Feb 17 16:36:26 cnsz0804 sshd[15800]: Connection closed by 10.12.24.18
Feb 17 16:39:48 cnsz0804 sshd[16093]: Connection closed by 10.12.24.18
Feb 17 17:18:51 cnsz0804 sshd[19952]: pam_access(sshd:account): access denied for user `hadoop' from `10.12.25.113'
Feb 17 17:18:51 cnsz0804 sshd[19952]: Failed password for hadoop from 10.33.25.113 port 63686 ssh2
Feb 17 17:18:51 cnsz0804 sshd[19953]: fatal: Access denied for user hadoop by PAM account configuration
Feb 17 17:20:16 cnsz0804 sshd[20107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.12.25.113 user=chkusr

3，检查发现/etc/security/access.conf文件尾有如下配置

# All other users should be denied to get access from all sources.
#- : ALL : ALL
+:ALL:bond0... localhost
+:ALL:10.11.77.
+:ALL:10.11.100.
+:ALL:10.11.108.
+:ALL:10.11.111.
+:ALL:10.31.177.
+:ALL:10.37.100.
+:ALL:10.57.0.
-:ALL EXCEPT usr03 usr01 deploy log :ALL
-:chkusr iaopr serviceop deployop logop: 10.13. 10.42. 10.43. 10.50

去掉如上配置后可以正常登陆

4，修改替换

sed -i '123,$s/^/#/' /etc/security/access.conf
sed -n '123,$p' /etc/security/access.conf