I've started seeing these lines in my daily logs.  Don't recall when
they started, but I know for 2 days now.  Can someone explain why they
are "false" ?
 --------------------- "pam_unix" = false Begin
------------------------ 
crond:
   Unknown Entries:
      session closed for user root: 170 Time(s)
      session opened for user root by (uid=0): 170 Time(s)
      session closed for user rob: 40 Time(s)
      session opened for user rob by (uid=0): 40 Time(s)
rsh:
   Unknown Entries:
      session closed for user rob: 2 Time(s)
      session opened for user rob by (uid=0): 2 Time(s)
sshd:
   Authentication Failures:
      root (200.55.192.29): 3 Time(s)
      unknown (211.233.38.86): 3 Time(s)
      unknown (152.92.112.120): 2 Time(s)
      unknown (218.206.92.226): 2 Time(s)
   Invalid Users:
      Unknown Account: 7 Time(s)
su:
   Sessions Opened:
      sam(uid=500) -> root: 2 Time(s)
 ---------------------- "pam_unix" = false End
-------------------------
Snowman
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.centos.org/pipermail/centos/attachments/20051215/c72c8f56/attachment-0001.html>
Sam Drinkard wrote on Thu, 15 Dec 2005 11:07:02 -0500:> I've started seeing these lines in my daily logs.I doubt they are this way in your "logs". They are in your Logwatch report, hm? That's quite a difference. Kai -- Kai Sch?tzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com