The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

ATD Entry in Logwatch

Discussion in 'General Discussion' started by joe.odell, Apr 12, 2012.

  1. joe.odell

    joe.odell Member

    Joined:
    Nov 22, 2011
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Hello,

    I've started seeing the following entry in the Logwatch email I get every day, and it's only appeared in the past week or so.

    --------------------- pam_unix Begin ------------------------

    atd:
    ************Unknown Entries:
    ************************session closed for user root: 1 Time(s)
    ************************session opened for user root by (uid=0): 1 Time(s)


    ---------------------- pam_unix End -------------------------

    I'm running 11.32.18 - Is this something I should worry about, or is it something about a new feature that I can stop showing up in the Logwatch emails?

    Thanks!

    Joe
     
  2. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,448
    Likes Received:
    195
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
  3. joe.odell

    joe.odell Member

    Joined:
    Nov 22, 2011
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Ok, thanks for the reply :)

    Sorry to seem dumb, but I take it there's nothing to worry about?
     
  4. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,448
    Likes Received:
    195
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    I think you're fine. This topic has come up a few times over the past week or so, you're not alone in noticing it.

    And its good that you did. Keeping a close eye on those logs is a good thing. :)
     
  5. WaldoPepper

    WaldoPepper Registered

    Joined:
    May 3, 2012
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Although ATD had been already running I got the following logwatch entries:

    Code:
     --------------------- pam_unix Begin ------------------------ 
    
    atd:
        Unknown Entries:
           session closed for user root: 1 Time(s)
           session opened for user root by (uid=0): 1 Time(s)
     
     
     ---------------------- pam_unix End ------------------------- 
    
     
     --------------------- Connections (secure-log) Begin ------------------------ 
    
     
     **Unmatched Entries**
     atd[7962]: pam_loginuid(atd:session): set_loginuid failed opening loginuid
     
     ---------------------- Connections (secure-log) End ------------------------- 
    Therefore I stopped and started ATD again. Unfortunately logwatch is still reporting the issue.

    Any ideas how to solve this on cpanel running latest release b25?
     
  6. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,623
    Likes Received:
    21
    Trophy Points:
    38
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
  7. WaldoPepper

    WaldoPepper Registered

    Joined:
    May 3, 2012
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    No error entries from crond found.
     
  8. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,623
    Likes Received:
    21
    Trophy Points:
    38
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    Likely a different cause then as both would be failing. Can you submit a ticket to us for us to check into what is going on? I show no reports of this happening on our ticket system. The option to submit a ticket can be found in my signature or using WHM > Support Center > Contact cPanel area. It would be great if you would post the ticket number here afterward so we can track the issue.
     
Loading...

Share This Page