i am not claiming, i am asking.. that is a difference
i have used the system for 2 yrs with no big problems, however i did get the same problem just 2-3 days after "albertux" and that is at a minimum strange.
i am checking the password files now.. it may be these but the only service being used on this box was ispconfig and by changing one users password (through ispconfig) and same time setting up a catchall for him.. this incident occured..
my /etc/passwd have rw r r attributes
my /etc/shadow only have r for root... what should it have ? same attributes as /etc/passwd ??