Weird stuff in in my /var/log/auth.log

Posted by xXx on Server Fault See other posts from Server Fault or by xXx
Published on 2012-06-17T20:34:53Z Indexed on 2012/06/17 21:18 UTC
Read the original article Hit count: 252

Filed under:
|
|
|

I just check my logs on my deed serv, i spotted some weird log in the auth.log :

Jun 17 22:27:01 mutualab CRON[16249]: pam_unix(cron:session): session opened for user user by (uid=0)
Jun 17 22:27:01 mutualab CRON[16249]: pam_unix(cron:session): session closed for user user
Jun 17 22:28:01 mutualab CRON[16253]: pam_unix(cron:session): session opened for user user by (uid=0)
Jun 17 22:28:01 mutualab CRON[16253]: pam_unix(cron:session): session closed for user alain
Jun 17 22:29:01 mutualab CRON[16257]: pam_unix(cron:session): session opened for user user by (uid=0)
Jun 17 22:29:01 mutualab CRON[16257]: pam_unix(cron:session): session closed for user user

Looks like somebody try to log - and suceed ? - but delog instantly ? I got the same log for hours now...

Do you know what happens ?

N.B : it's a 10.04 ubuntu server

© Server Fault or respective owner

Related posts about ubuntu

Related posts about logging