Help Center/ Elastic Cloud Server/ Troubleshooting/ Remote Login/ Remote Login Errors on Linux/ What Do I Do If requirement "uid >= 1000" not met by user "root" Is Reported When I SSH Into a Linux ECS?
Updated on 2026-07-07 GMT+08:00

What Do I Do If requirement "uid >= 1000" not met by user "root" Is Reported When I SSH Into a Linux ECS?

Symptom

After you enter the correct username and password, you cannot log in to an Linux ECS. When this problem occurs, you can log in to the ECS using either VNC or SSH, or you cannot log in to the ECS using either of them. When you run the cat /var/log/secure command to view the secure log, the following error information is displayed:

pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root".

Possible Causes

The policy configuration of the PAM module prohibits users whose UID is less than 1000 from logging in to the ECS.

Solution

The following procedure uses CentOS 6.5 64-bit as an example. The configuration may vary depending on the OS type and version. For details, see the official documents of the corresponding OS.

  1. Log in to the Linux ECS using VNC or an SSH client.
  2. Run the cat command to check the abnormal login mode and the corresponding PAM configuration file. The following table lists the details.

    File

    Description

    /etc/pam.d/login

    Configuration file for the console, including password verification, account locking, and login IP address restriction

    /etc/pam.d/sshd

    Authentication information for SSH remote login

    /etc/pam.d/system-auth

    System-level authentication information, such as password policies, user information, and access control

    Each application that has PAM enabled has a configuration file with the same name in the /etc/pam.d directory. For example, the configuration file for the login command is /etc/pam.d/login, where you can configure specific policies. Check whether the configuration file contains information similar to the following:

    auth required pam_succeed_if.so uid >= 1000
  3. Use the vi editor to modify the configuration file.
    • Modify the policy configuration:
      auth required pam_succeed_if.so uid <= 1000 
    • Cancel the policy configuration:
      # auth required pam_succeed_if.so uid >= 1000
  4. Log in to the ECS again.