ArmbianHelper changed the topic of #armbian to: armbian - Linux for ARM development boards | www.armbian.com | Github: github.com/armbian | Commits: #armbian-commits | Developer talk: #armbian-devel | Forum feed: #armbian-rss | Off-Topic: #armbian-offtopic | Logs: -> irc.armbian.com
archetech has quit [Ping timeout: 240 seconds]
KREYREN has quit [Remote host closed the connection]
archetech has joined #armbian
montjoie has quit [Ping timeout: 252 seconds]
buzzmarshall has joined #armbian
archetech has quit [Ping timeout: 240 seconds]
DC-IRC has quit [Remote host closed the connection]
DC-IRC has joined #armbian
_Random has joined #armbian
<_Random>
hey guy's can pleaase adise why this is the case ""su -
<_Random>
Password: 'This account is currently not available.' "
<_Random>
This occurs while attempting to access the root via ssh. I login into my user account, but can't switch to root. Although I'm able to run root commands with sudo via my user account.
<_Random>
Armbian 11: Bullseye. Kernel: 6.1.50-current-rockchip64 aarch64. NanoPi M4 Ver2.0. deb http://apt.armbian.com bullseye main bullseye-utils bullseye-desktop
arch3r has quit [Ping timeout: 240 seconds]
arch3r has joined #armbian
jclsn has quit [Ping timeout: 240 seconds]
jclsn has joined #armbian
archetech has joined #armbian
<_Random>
reverted to bash, still cant access with with su or sudo -i, but works with "sudo -s /bin/bash"
<jspiros>
sudo -u
<_Random>
no fal for -u
<_Random>
no flag for -u
<jspiros>
sorry, wrong window, just too on topic to be obvious :)
<_Random>
btw thankyou for helping jspiros:)
<jspiros>
sounds like the user might be disabled
<_Random>
you must be greek with a name like spiros
<jspiros>
some of my ancestors were
* jspiros
is American
<_Random>
both sides of mine are
<_Random>
island of kythera
<jspiros>
most of my ancestors are Mediterranean, some greek, some italian
<jspiros>
nisyros here :)
<_Random>
aussie 100 yrs plus
<jspiros>
yeah most of my ancestors that came here came around 1880-1910 timeframe
<_Random>
almost half the Dna is Venitian, half greek. 2% is Yemeni
<jspiros>
I am about 75% mediterranean and 25% other, the mediterranean is about 50/50 greek/italian, the other is eastern europe (poland and slovakia I think) and a little british
<_Random>
nisyros, is a beautiful spot.
<_Random>
I married a Croat.
<jspiros>
the british is half irish and half english I think, and through the greek I have like 1-2% middle eastern DNA (according to DNA analysis, I have no records going back that far) and up to 1%north african probably through the italian
<_Random>
100% on her side her parents came here in the 60's
<jspiros>
but I only have records going back to as early as the 1700s
<jspiros>
and that's just the english trail, which is a narrow view
<_Random>
greek orthodox church Nisyros will have records
* jspiros
married an Indian
<_Random>
nice. what a blend of cultures, especially the great food.
<jspiros>
(south Indian, and pretty purely so)
<jspiros>
I do like good food :)
<DC-IRC>
<infinity_q> I like food
<_Random>
I have no doubt!
_Random has quit [Quit: I'm all over it ...]
archetech has quit [Quit: Leaving]
montjoie has joined #armbian
buzzmarshall has quit [Quit: Konversation terminated!]
crabbedhaloablut has joined #armbian
junaid_ has joined #armbian
junaid_ has quit [Ping timeout: 240 seconds]
alekksander has joined #armbian
junaid_ has joined #armbian
maknho has quit [Quit: WeeChat 3.0]
zeemate has joined #armbian
arch3r has quit [Quit: bye]
ccatss084 has quit [Server closed connection]
ccatss084 has joined #armbian
stipa_ has joined #armbian
stipa has quit [Read error: Connection reset by peer]
stipa_ is now known as stipa
alekksander has quit [Quit: Konversation terminated!]
junaid_ has quit [Remote host closed the connection]
<DC-IRC>
<tenkawa42> btw that message occurs when the user shell is set wrong
junaid_ has joined #armbian
<jspiros>
which is sometimes done intentionally to effectively disable a user
<jspiros>
I think /bin/false is often used that way, and something else I'm forgetting
arch3r has joined #armbian
<lanefu>
I think it might be `/usr/sbin/nologin` as preferred pattern
<DC-IRC>
<tenkawa42> nologin definitely is the preferred mechanism because it uses the syslog mechanism to log when used as well.
<jspiros>
yeah, that sounds about right
<DC-IRC>
<tenkawa42> Unfortunately you have to enable the logging specificly but it does create a hook SSH_ORIGINAL_COMMAND
<DC-IRC>
<tenkawa42> apparently
<DC-IRC>
<tenkawa42> I did do a test and this definitely a specific difference
<DC-IRC>
<tenkawa42> nologin:
<DC-IRC>
<tenkawa42> Last login: Sun Sep 17 09:18:53 2023 from 192.168.1.221
<DC-IRC>
<tenkawa42> This account is currently not available.
<DC-IRC>
<tenkawa42> Connection to vf2 closed.
<DC-IRC>
<tenkawa42> /bin/false:
<DC-IRC>
<tenkawa42> Last login: Sun Sep 17 09:21:05 2023 from 192.168.1.221
<DC-IRC>
<tenkawa42> Connection to vf2 closed.
<DC-IRC>
<tenkawa42> It does have a different behaviour
<jspiros>
yeah, nologin basically just gracefully ignores flags often used by shells, and prints a message (either the built-in "his account is currently not available" or whatever is in /etc/nologin.txt) and exits with a failure
<jspiros>
false only does the very last thing (exits with a failure)
<jspiros>
either works, but /bin/false is perhaps an older approach, perhaps before nologin was a thing
<DC-IRC>
<tenkawa42> We used it back in the Unix days
<jspiros>
so yeah, it's pretty new
<DC-IRC>
<tenkawa42> or the * approach
<DC-IRC>
<tenkawa42> for no password or shell at all
<DC-IRC>
<tenkawa42> Old SVR4 Unix's wouldn't allow using a record if it had * in it
<DC-IRC>
<tenkawa42> This was unfortunately messed up when new auth methods (ssh keys/etc) came into existence because that mechanism only handles unix passwords directly if memory serves correctly
<DC-IRC>
<tenkawa42> (But also made much cleaner too)