Big news! The community will be moving to a new platform April 21. Read more.
Big news! The community will be moving to a new platform April 21. Read more.
Absent Member.
Absent Member.
1109 views

Cron and SSH

hello,

on our third node there are lots of messages like the following in /var/log/messages:


Mar 9 15:45:01 clu03 kernel: audit(1331304301.745:17352): user pid=3350 uid=0 auid=4294967295 msg='PAM: setcred acct=root : exe="/usr/sbin/cron" (hostnam
e=?, addr=?, terminal=cron res=success)'
Mar 9 15:45:01 clu03 kernel: audit(1331304301.745:17353): user pid=3350 uid=0 auid=4294967295 msg='PAM: session close acct=root : exe="/usr/sbin/cron" (h
ostname=?, addr=?, terminal=cron res=success)'
Mar 9 15:48:27 clu03 sshd[31388]: Received disconnect from 192.168.186.33: 11: disconnected by user
Mar 9 15:48:27 clu03 kernel: audit(1331304507.914:17354): user pid=31388 uid=0 auid=0 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=
mymachine.here.com, addr=192.168.186.33, terminal=ssh res=success)'
Mar 9 15:48:27 clu03 kernel: audit(1331304507.914:17355): user pid=31388 uid=0 auid=0 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=mymachine.here.com, addr=192.168.186.33, terminal=ssh res=success)'
Mar 9 15:48:58 clu03 kernel: audit(1331304538.098:17356): user pid=5861 uid=0 auid=4294967295 msg='acct="root": exe="/usr/sbin/sshd" (hostname=?, addr=19
2.168.75.7, terminal=sshd res=failed)'


Any ideas on that?
Labels (2)
0 Likes
1 Reply
Absent Member.
Absent Member.

hello,
which service are you checking in cluster service?

do you have installed some cluster application in the server?

how often are repeating these messages? are they repeating?

maybe you can check the cron configuration files and directories.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.