The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Audit and Messages Question

Discussion in 'General Discussion' started by lamans, Apr 3, 2006.

  1. lamans

    lamans Member

    Joined:
    Mar 17, 2006
    Messages:
    21
    Likes Received:
    0
    Trophy Points:
    1
    Hiya..

    I cant find anything relating to this after a good few searches... In my messages and audit logs i keep getting this message like every few seconds... I get like 5000 or 6000 of these a day... Over and over the only thing that changes is the user pid and the audit number...

    audit(1143932402.162:27698): user pid=4392 uid=0 auid=4294967295 msg='PAM accounting: user=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron result=Success)'

    audit(1143932402.340:27699): user pid=4387 uid=0 auid=4294967295 msg='PAM accounting: user=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron result=Success)'

    audit(1143932402.368:27700): user pid=4387 uid=0 auid=4294967295 msg='PAM session open: user=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron result=Success)'

    audit(1143932402.372:27701): user pid=4387 uid=0 auid=4294967295 msg='PAM setcred: user=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron result=Success)'

    Can anyone shine any light on this for me...

    With Thanks Yo
     
  2. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    It's a "feature" introduced into FC3/FC4. You can stop them from being logged by editing /etc/syslog.conf and look for the line:

    Code:
    *.info;mail.none;news.none;authpriv.none;cron.none             /var/log/messages
    Change it to:

    Code:
    *.info;mail.none;news.none;authpriv.none;cron.none;auth.!=info  /var/log/messages
    Then restart syslog:

    service syslog restart
     
  3. lamans

    lamans Member

    Joined:
    Mar 17, 2006
    Messages:
    21
    Likes Received:
    0
    Trophy Points:
    1
    Hiya...

    Thanks man your on the ball...
     
Loading...

Share This Page