Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an OpenSuSE 12.3 machine and can't login to the box either on tty or via ssh. As soon as the user logs in the session terminates and in the message "login [1234] permission denied" is printed.

The machine was set to autologin on KDE so that user autologs-in.

Any Ideas?

I am not sure what has changed on the system, I am not the only one who has access to the box and according to everybody nothing has changed.
The only thing that went wrong on the system was that it takes a backup of a DB on a different machine and there wasn't any space on it. I cleared all the space after some googling updated PAM, that solved the problem.
But then the problem repeated when I check the system there wasn't any space again, cleared the system re-installed PAM to no avail. Upgraded the system from 12.1 to 12.3 but didn't help.

There isn't a /var/log/secure log. The only relevant message is permission denied.

Users are not locked on KDE I can login with any user but not on tty or ssh, can su/sudo.

There are lot of files in /etc/pam.d/ which one do I need to check

share|improve this question
That's pretty vague problem description What have you done so far and what are the results? What's changed recently? etc... More information can help us get you to what you're after sooner. At this point all I can think to tell you is to check /var/log/secure to see if anything descriptive got printed there. – Bratchley Jun 27 '13 at 15:48
It might also be worthwhile to get the PAM configuration in case there's a problem there. I'd update your question with this information so people have more to work with. – Bratchley Jun 27 '13 at 15:50
This isn't enough to go on. Can you confirm that the password is correct and you can su - <user>? Is the account locked? Look in /etc/passwd to see if their is an LK in the user's entry. – slm Jun 27 '13 at 17:04

Do you have root login to the server? If so, please check the /var/log/secure file for any relevant message.

If you do have root access, then login as root and then su to that account. See that is successful or not.

Also check the /etc/security/access.conf for any custom config that might refuse login using that user account.

share|improve this answer

The files in /etc/pam.d are per-service, so you need to check the /etc/pam.d/login and /etc/pam.d/ssh config files for tty and ssh, respectively.

Check your syslog configuration to see what file facility AUTHPRIV is configured to be sent to, verify also that the priority filtering is permissive.

share|improve this answer

Look at your /etc/ssh/sshd_config. I had, for some reason unknown to me, a user restricted to logging on from one server only in the Allowusers section.

share|improve this answer

This could be caused by a corrupted /var/log/btmp file.


cat /dev/null > /var/log/btmp

or delete and re-create (mode 600 root:root) the file, then check again.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.