| 1 |
On 18-Jul-11 21:24, Michael Mol wrote: |
| 2 |
> On Mon, Jul 18, 2011 at 3:16 PM, Jarry<mr.jarry@×××××.com> wrote: |
| 3 |
>> On 18-Jul-11 21:07, Michael Mol wrote: |
| 4 |
>>>> |
| 5 |
>>>> ----- |
| 6 |
>>>> 2011-07-18T18:41:02+00:00 game fcron[30787]: pam_unix(fcron:session): |
| 7 |
>>>> session opened for user root by (uid=0) |
| 8 |
>>>> 2011-07-18T18:41:04+00:00 game fcron[30787]: pam_unix(fcron:session): |
| 9 |
>>>> session closed for user root |
| 10 |
>>> |
| 11 |
>>>> Now my question is: why is fcron sending messages to /dev/log, |
| 12 |
>>>> when it should not do it? |
| 13 |
>>> |
| 14 |
>>> If I'm reading that correctly, it's not really fcron that's logging, but |
| 15 |
>>> PAM. |
| 16 |
>> |
| 17 |
>> I thought it is because cron is opening session as root. |
| 18 |
>> There is nothing else that could fire pam every 10 min. |
| 19 |
>> |
| 20 |
>> I already checked /etc/cron.hourly (daily, weekly, monthly), |
| 21 |
>> there is nothing else that could cause it. And the process |
| 22 |
>> name calling syslog is "fcron" (3rd field in message)... |
| 23 |
> |
| 24 |
> Cron is opening a session as root. Pam is part of that process. Pam is |
| 25 |
> logging its participation in that process. |
| 26 |
> |
| 27 |
> At least, that's what it looks like from here. |
| 28 |
> |
| 29 |
|
| 30 |
I'm no expert for logging, but I think syslog-message looks like: |
| 31 |
<priority> timestamp hostname program[pid]: message |
| 32 |
|
| 33 |
So to me it looks fcron (pid 30787) is sending output to |
| 34 |
/dev/syslog. pam is sending message back to fcron but not |
| 35 |
to syslog. And I wonder why fcron is forwarding that message |
| 36 |
to syslog, when it should not... |
| 37 |
|
| 38 |
Jarry |
| 39 |
|
| 40 |
-- |
| 41 |
_______________________________________________________________ |
| 42 |
This mailbox accepts e-mails only from selected mailing-lists! |
| 43 |
Everything else is considered to be spam and therefore deleted. |
Archives