I can’t see any differences (login physically with the wrong password vs the right password).
Message is: Login incorrect.
(maybe it was wrong to rename the maschines name during installation from Rockstor to myrockstor?)
/var/log/messages says nothing (means too much)
/var/log/secure shows this about the tries (for me this requirement is remarkarkable: requirement “uid >= 1000” not met by user “root” ):
May 31 09:17:34 myrockstor login: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=tty1 ruser= rhost= user=root
May 31 09:17:34 myrockstor login: pam_succeed_if(login:auth): requirement “uid >= 1000” not met by user “root”
May 31 09:17:36 myrockstor login: FAILED LOGIN 1 FROM tty1 FOR root, Authentication failure
May 31 09:17:55 myrockstor login: pam_succeed_if(login:auth): requirement “uid >= 1000” not met by user “root”
May 31 09:17:58 myrockstor login: FAILED LOGIN 2 FROM tty1 FOR root, Authentication failure
May 31 09:18:26 myrockstor login: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=tty1 ruser= rhost= user=simpleuser
May 31 09:18:28 myrockstor login: FAILED LOGIN 1 FROM tty1 FOR simpleuser, Authentication failure
May 31 09:18:53 myrockstor login: pam_unix(login:auth): check pass; user unknown
May 31 09:18:53 myrockstor login: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=tty1 ruser= rhost=
May 31 09:18:55 myrockstor login: FAILED LOGIN 2 FROM tty1 FOR (unknown), User not known to the underlying authentication module
May 31 09:19:16 myrockstor login: FAILED LOGIN SESSION FROM tty1 FOR simpleuser, Authentication failure
May 31 09:19:16 myrockstor login: PAM 1 more authentication failure; logname=LOGIN uid=0 euid=0 tty=tty1 ruser= rhost= user=simpleuser
May 31 09:20:02 myrockstor login: pam_unix(login:auth): check pass; user unknown
May 31 09:20:02 myrockstor login: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=tty1 ruser= rhost=
May 31 09:20:04 myrockstor login: FAILED LOGIN 1 FROM tty1 FOR (unknown), User not known to the underlying authentication module
May 31 09:20:10 myrockstor login: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=tty1 ruser= rhost= user=root
May 31 09:20:10 myrockstor login: pam_succeed_if(login:auth): requirement “uid >= 1000” not met by user “root”
May 31 09:20:11 myrockstor login: FAILED LOGIN 2 FROM tty1 FOR root, Authentication failure
May 31 09:28:00 myrockstor sshd[7490]: Accepted password for root from 192.168.1.xxx port 99999 ssh2
May 31 09:28:01 myrockstor sshd[7490]: pam_unix(sshd:session): session opened for user root by (uid=0)