unknown class root from sshd

[Nikos Vassiliadis]

On Wednesday 12 April 2006 13:36, Dave wrote:
> Hello,
> Thank you for your reply. I have not changed the class for root

I 've sent a correction about this. I guess some user logging in is in
a non-defined class
What awk -F ":" '{ if ($5 != "") print $1, $5 }' /etc/master.passwd says?

> and this is 
> occurring on several machines, all 6.x.

That's pretty strange!

> Thanks.
> Dave.
>
> ----- Original Message -----
> From: "Nikos Vassiliadis" <nvass at teledomenet.gr>
> To: <freebsd-questions at freebsd.org>; "Dave" <dmehler26 at woh.rr.com>
> Sent: Wednesday, April 12, 2006 5:37 AM
> Subject: Re: unknown class root from sshd
>
> > On Wednesday 12 April 2006 12:03, Dave wrote:
> >> Hello,
> >>     I'm seeing this in my /var/log/messages from sshd on freebsd6. I'm
> >> concerned that i'm being probed.
> >>
> >> sshd(pid): login_getclass: unknown class 'root'
> >> Has anyone seen this?
> >
> > Class is the fifth field in /etc/master.passwd
> > It is a BSD thing and doesn't appear in /etc/passwd
> > read man 5 passwd
> >
> > the first line of my /etc/master.passwd is:
> > root:password_here:0:0::0:0:Charlie &
> > class field -------------------^
> >
> > In the default setup class is null, which means default
> > class. There is no root class(by default). Classes are
> > defined in /etc/login.conf
> >
> > So, did you change the class field for root?
> >
> >> Thanks.
> >> Dave.
> >>
> >> _______________________________________________
> >> freebsd-questions at freebsd.org mailing list
> >> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> >> To unsubscribe, send any mail to
> >> "freebsd-questions-unsubscribe at freebsd.org"