You are not logged in.

#1 2018-07-10 18:49:12

vipinbalakrishnan
Member
Registered: 2018-07-10
Posts: 12

Authentication token manipulation error [SOLVED]

I did backup of my arch Linux . After that formatted my installation. When I tried to restore the installation from backup and change the password . Getting "authentication token manipulation error".

1) I tried doing this mount -o remount,rw /

Result ==> But always get an error stating mount can only use "--options" option (effective uid is 1000)

2) pwconv to recreate the shadow file not change

Result => same "authentication token manipulation error".

3) Try changing kernel argument init=/bin/bash

Try to change the password of the root again one it boot into bash

Result:=> "authentication token manipulation error"


When i tried to boot it will throw error after selecting the grub (screenshot attached boot.png)




I'm really puzzled what mistake i'm doing.

Please check this link to get the error screenshot

https://drive.google.com/drive/folders/ … sp=sharing

Last edited by vipinbalakrishnan (2018-07-11 14:39:09)

Offline

#2 2018-07-10 18:53:37

ewaller
Administrator
From: Pasadena, CA
Registered: 2009-07-13
Posts: 15,904

Re: Authentication token manipulation error [SOLVED]

What is the output of mount   ?
Is the volume on which /etc exists mounted as read only?


Nothing is too wonderful to be true, if it be consistent with the laws of nature -- Michael Faraday
Sometimes it is the people no one can imagine anything of who do the things no one can imagine. -- Alan Turing
---
How to Ask Questions the Smart Way

Offline

#3 2018-07-10 19:05:11

vipinbalakrishnan
Member
Registered: 2018-07-10
Posts: 12

Re: Authentication token manipulation error [SOLVED]

Hi ewaller, Thanks for replying.

After restoring the backup unable to login (Please refer boot.png screenshot). But my grub is working. So i modified kernel argument init=/bin/bash . Then enter to root shell and executed mount command. Attaching the screenshot in my google drive link

https://drive.google.com/drive/folders/ … sp=sharing

Yes, /etc is available. I did not created  /etc as a separate volume . It is in the / (refer disk.png)

Attached screenshot in same above link as etc.png

Offline

#4 2018-07-10 19:08:46

loqs
Member
Registered: 2014-03-06
Posts: 5,200

Re: Authentication token manipulation error [SOLVED]

None of the six images shows the output of `mount` not `mount -o remount,rw /`

Offline

#5 2018-07-10 19:12:29

vipinbalakrishnan
Member
Registered: 2018-07-10
Posts: 12

Re: Authentication token manipulation error [SOLVED]

Sorry loqs and ewaller, Attaching mount output as mount_output.png in the same google drive link. Please let me know anymore information required

Offline

#6 2018-07-10 21:06:16

seth
Member
Registered: 2012-09-03
Posts: 7,560

Re: Authentication token manipulation error [SOLVED]

stat `which mount`
id

And please just post the text, don't upload images of text.

Offline

#7 2018-07-10 21:43:30

progandy
Member
Registered: 2012-05-17
Posts: 2,969

Re: Authentication token manipulation error [SOLVED]

seth wrote:

And please just post the text, don't upload images of text.

To get the text from your VT, you can use script or setterm:
https://wiki.archlinux.org/index.php/Sc … e#Terminal

Then you can copy those files on a flash drive or upload them to some pastebin
https://wiki.archlinux.org/index.php/Li … in_clients


| alias CUTF='LANG=en_XX.UTF-8@POSIX ' |

Offline

#8 2018-07-11 04:13:02

vipinbalakrishnan
Member
Registered: 2018-07-10
Posts: 12

Re: Authentication token manipulation error [SOLVED]

@seth It is very difficult to upload me the text. First problem is, i'm running virtual machine. Second after backup restore system is not booting. Whatever the screenshot i posted here login with init=/bin/bash in grub kernel parameter. At that time systemd is not available to make sshd connect. The only way i can send text here is booting my machine with iso file then arch-chroot. The command you ask me i  again post only as a image (which_mount.png). Please let me know any other way you want me to post text.

Offline

#9 2018-07-11 04:47:31

vipinbalakrishnan
Member
Registered: 2018-07-10
Posts: 12

Re: Authentication token manipulation error [SOLVED]

From Arch-Chroot i'm taking all the text out attaching here. Because unable to login after restore

stat `which mount`

  File: /usr/bin/mount
  Size: 42968     	Blocks: 88         IO Block: 4096   regular file
Device: fe01h/65025d	Inode: 1181251     Links: 1
Access: (4755/-rwsr-xr-x)  Uid: ( 1000/   vipin)   Gid: ( 1001/ UNKNOWN)
Access: 2018-07-10 23:15:41.180000000 +0530
Modify: 2018-04-10 18:09:51.000000000 +0530
Change: 2018-07-09 02:55:09.660000001 +0530
 Birth: -

Permission of passwd and shadow

-rw-r--r-- 1 root root 1026 Jul  2 19:56 /etc/passwd
-rw------- 1 root root 493 Jul 10 23:59 /etc/shadow

Mount command

/dev/mapper/vgos-root on / type ext4 (rw,relatime)
proc on /proc type proc (rw,nosuid,nodev,noexec,relatime)
sys on /sys type sysfs (ro,nosuid,nodev,noexec,relatime)
udev on /dev type devtmpfs (rw,nosuid,relatime,size=2863380k,nr_inodes=715845,mode=755)
devpts on /dev/pts type devpts (rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=000)
shm on /dev/shm type tmpfs (rw,nosuid,nodev,relatime)
run on /run type tmpfs (rw,nosuid,nodev,relatime,mode=755)
tmp on /tmp type tmpfs (rw,nosuid,nodev)
airootfs on /etc/resolv.conf type overlay (rw,relatime,lowerdir=/run/archiso/sfs/airootfs,upperdir=/run/archiso/cowspace/persistent_ARCH_201807/x86_64/upperdir,workdir=/run/archiso/cowspace/persistent_ARCH_201807/x86_64/workdir,index=off)

cat /etc/passwd

root:x:0:0::/root:/bin/bash
bin:x:1:1::/:/sbin/nologin
daemon:x:2:2::/:/sbin/nologin
mail:x:8:12::/var/spool/mail:/sbin/nologin
ftp:x:14:11::/srv/ftp:/sbin/nologin
http:x:33:33::/srv/http:/sbin/nologin
nobody:x:65534:65534:Nobody:/:/sbin/nologin
dbus:x:81:81:System Message Bus:/:/sbin/nologin
systemd-journal-remote:x:982:982:systemd Journal Remote:/:/sbin/nologin
systemd-network:x:981:981:systemd Network Management:/:/sbin/nologin
systemd-resolve:x:980:980:systemd Resolver:/:/sbin/nologin
systemd-coredump:x:979:979:systemd Core Dumper:/:/sbin/nologin
uuidd:x:68:68::/:/sbin/nologin
vipin:x:1000:1000::/home/vipin:/bin/bash
avahi:x:978:978:Avahi mDNS/DNS-SD daemon:/:/sbin/nologin
sddm:x:977:977:Simple Desktop Display Manager:/var/lib/sddm:/sbin/nologin
usbmux:x:140:140:usbmux user:/:/sbin/nologin
colord:x:976:976:Color management daemon:/var/lib/colord:/sbin/nologin
polkitd:x:102:102:PolicyKit daemon:/:/sbin/nologin
rtkit:x:133:133:RealtimeKit:/proc:/sbin/nologin
git:x:975:975:git daemon user:/:/usr/bin/git-shell

cat /etc/group

root:x:0:root
sys:x:3:bin
mem:x:8:
ftp:x:11:
mail:x:12:
log:x:19:
smmsp:x:25:
proc:x:26:polkitd
games:x:50:
lock:x:54:
network:x:90:
floppy:x:94:
scanner:x:96:
power:x:98:
adm:x:999:daemon
wheel:x:998:
kmem:x:997:
tty:x:5:
utmp:x:996:
audio:x:995:
disk:x:994:
input:x:993:
kvm:x:992:
lp:x:991:
optical:x:990:
render:x:989:
storage:x:988:
uucp:x:987:
video:x:986:sddm
users:x:985:
systemd-journal:x:984:
rfkill:x:983:
bin:x:1:daemon
daemon:x:2:bin
http:x:33:
nobody:x:65534:
dbus:x:81:
systemd-journal-remote:x:982:
systemd-network:x:981:
systemd-resolve:x:980:
systemd-coredump:x:979:
uuidd:x:68:
vipin:x:1000:
avahi:x:978:
sddm:x:977:
usbmux:x:140:
colord:x:976:
polkitd:x:102:
rtkit:x:133:
git:x:975:

Last edited by vipinbalakrishnan (2018-07-11 11:44:49)

Offline

#10 2018-07-11 07:14:30

seth
Member
Registered: 2012-09-03
Posts: 7,560

Re: Authentication token manipulation error [SOLVED]

Access: (4755/-rwsr-xr-x)  Uid: ( 1000/   vipin)   Gid: ( 1001/ UNKNOWN)

Mount is SUID and owned by vipin:1001 - you messed up file ownership when drawing the "backup" (what implies the "backup" is no "backup" but some flawed copy attempt - there may be more issues)

Notice that this issue ranges FAAAAAR wider than mount!

You can either go with https://github.com/andrewgregory/pacuti … irfile.pod or re-install all packages.

Offline

#11 2018-07-11 07:34:38

jasonwryan
Anarchist
From: .nz
Registered: 2009-05-09
Posts: 25,257
Website

Re: Authentication token manipulation error [SOLVED]

Please use code tags when pasting to the boards: https://wiki.archlinux.org/index.php/Co … s_and_code


Arch + dwm   •   Mercurial repos  •   Github

Registered Linux User #482438

Offline

#12 2018-07-11 11:52:58

vipinbalakrishnan
Member
Registered: 2018-07-10
Posts: 12

Re: Authentication token manipulation error [SOLVED]

seth, 

Please find the acts I did when I was doing backup.

1. I was logged into the machine when i executed the below command (backup command).
2. I did not boot it with Iso file before taking backup.
3. Now as request I executed mount  command ;  Login to the server with ISO file . Because the server was not boot after backup restore.

I use below command to take backup .

  sudo rsync -aAXv --exclude-from=excludeditems -e ssh  root@192.168.1.6:/  /home/vipin/mydata/arch/backup/

excludeditems

/dev/*
/proc/*
/sys/*
/mnt/*
/run/*
/tmp/*
.cache
/var/cache/pacman/pkg/*
/var/tmp/*
/var/log/*
lost+found
/home/vipin/Downloads/*
/home/vipin/.local/share/baloo/*
/home/vipin/.config/google-chrome
/home/vipin/.local/share/Trash
.npm
.npm-global

Last edited by vipinbalakrishnan (2018-07-11 12:15:02)

Offline

#13 2018-07-11 12:11:08

seth
Member
Registered: 2012-09-03
Posts: 7,560

Re: Authentication token manipulation error [SOLVED]

Then you messed up the restorage.
Either way, the  ownership of the mount binary (and probably many/all others) is off - if it's good on the backup, you're luck: just restore it again, but this time preserving all attributes.

Offline

#14 2018-07-11 12:17:40

vipinbalakrishnan
Member
Registered: 2018-07-10
Posts: 12

Re: Authentication token manipulation error [SOLVED]

Seth I am share the backup and restore command. Please correct me any mistake on it. Because I tried multiple time restoring the same. And i got the same issue.

Back up

  sudo rsync -aAXv --exclude-from=excludeditems -e ssh  root@192.168.1.6:/  /home/vipin/mydata/arch/backup/

restore command

  rsync -aAXv -e "ssh /home/vipin/mydata/arch/backup/ root@192.168.1.6:/mnt

Here my root was mount at /mnt of iso file

Last edited by vipinbalakrishnan (2018-07-11 12:17:58)

Offline

#15 2018-07-11 12:35:18

loqs
Member
Registered: 2014-03-06
Posts: 5,200

Re: Authentication token manipulation error [SOLVED]

What user did you execute the rsync commands as?

Offline

#16 2018-07-11 12:42:07

vipinbalakrishnan
Member
Registered: 2018-07-10
Posts: 12

Re: Authentication token manipulation error [SOLVED]

loqs That machine also having a user vipin. Also the backup  system also having a user vipin. Both are two different machine and different user

Last edited by vipinbalakrishnan (2018-07-11 12:43:37)

Offline

#17 2018-07-11 12:45:53

seth
Member
Registered: 2012-09-03
Posts: 7,560

Re: Authentication token manipulation error [SOLVED]

That's not what he asked. What user did you run the second rsync command as? If the answer is "vipin", there's your problem.

Offline

#18 2018-07-11 12:46:13

loqs
Member
Registered: 2014-03-06
Posts: 5,200

Re: Authentication token manipulation error [SOLVED]

That does not answer my question.

Offline

#19 2018-07-11 12:51:02

vipinbalakrishnan
Member
Registered: 2018-07-10
Posts: 12

Re: Authentication token manipulation error [SOLVED]

Yes, I execute backup and restore command with vipin user. Please let me know this answer your question. Please let me know anymore explanation required on this.

Offline

#20 2018-07-11 12:54:40

seth
Member
Registered: 2012-09-03
Posts: 7,560

Re: Authentication token manipulation error [SOLVED]

I'll now briefly jump out of a window…

Offline

#21 2018-07-11 13:22:35

vipinbalakrishnan
Member
Registered: 2018-07-10
Posts: 12

Re: Authentication token manipulation error [SOLVED]

seth, Is it anything wrong with my backup script ?As i told you i ran it as vipin.

Last edited by vipinbalakrishnan (2018-07-11 13:23:40)

Offline

#22 2018-07-11 13:26:14

Lone_Wolf
Member
From: Netherlands, Europe
Registered: 2005-10-04
Posts: 6,135

Re: Authentication token manipulation error [SOLVED]

vipinbalakrishnan, check Rsync#As_a_backup_utility .

Do the commands in that section use sudo anywhere ?
As what user are they run ?

No idea if the ownership / permissions of the backup can be corrected, you may have to do an install from scratch.

Edit

ran it as vipin.

that's the problem.

Last edited by Lone_Wolf (2018-07-11 13:27:35)


Booting with apg Openrc, NOT systemd.
Automounting : not needed, i prefer pmount
Aur helpers : makepkg + my own local repo === rarely need them

Offline

#23 2018-07-11 13:26:22

loqs
Member
Registered: 2014-03-06
Posts: 5,200

Re: Authentication token manipulation error [SOLVED]

I think the issue is running the commands as none root without --fake-super and from a remote system without --numeric-ids.  Those more familiar with rsync would be able to offer better advice.

Last edited by loqs (2018-07-11 13:35:04)

Offline

#24 2018-07-11 13:35:15

vipinbalakrishnan
Member
Registered: 2018-07-10
Posts: 12

Re: Authentication token manipulation error [SOLVED]

Lone_Wolf while taking backup i used below command which is having sudo user with vipin and ssh with root user to remote shell.

  sudo rsync -aAXv --exclude-from=excludeditems -e ssh  root@192.168.1.6:/  /home/vipin/mydata/arch/backup/ 

restore i used below command with vipin user and  ssh i connected with root user. No sudo anywhere for restore

    rsync -aAXv -e "ssh /home/vipin/mydata/arch/backup/ root@192.168.1.6:/mnt

Last edited by vipinbalakrishnan (2018-07-11 13:40:10)

Offline

#25 2018-07-11 13:40:32

Lone_Wolf
Member
From: Netherlands, Europe
Registered: 2005-10-04
Posts: 6,135

Re: Authentication token manipulation error [SOLVED]

We need someone familiar with rsync to verify, but that strongly suggests the backup was created wrong and unusable to restore the system.


Booting with apg Openrc, NOT systemd.
Automounting : not needed, i prefer pmount
Aur helpers : makepkg + my own local repo === rarely need them

Offline

Board footer

Powered by FluxBB