Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

A trusted friend and I had ssh'ed into a Mac OS X Web Server (either snow leopard or lion) from two different locations. Then my password stopped working when trying to log in.

I can safely rule out the possibility that my friend changed my password, and I'm pretty sure another malicious user didn't do it. The only thing my friend did was send his ssh keypair to the server.

Somebody else set up the server so I am not sure how everything is configured, but is there a security measure employed by mac servers that kicks users who are logging in from two different IPs at the same time?

share|improve this question

1 Answer 1

up vote 0 down vote accepted

It is a control that could have been added by the admins on that server - concurrent logins (except where this expected) are a simple flag to alert of possible malicious behaviour.

However, it is not something we see that often, and very rarely at system level - this is usually an application based control - so I would be more inclined to think that somewhere along the line something has just got broken, whether this is a password expiry, account disabling for some other reason, incorrect keypairs being used, or even configuration settings being set up incorrectly when your friend did that.

There are a lot of good reasons to avoid sharing accounts, and not just for the sysadmins - you might need to go through the history file on your friend's machine to see exactly what happened at his end.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.