Help on a log of /var/log/messages

Help on a log of /var/log/messages

Post by Giusepp » Fri, 13 Dec 2002 22:23:33



Hi,

I left the computer on with the screen locked under kde.
Later, I discovered the following by looking at /var/log/messages:

Dec  7 19:12:04 Nancy kde(pam_unix)[3443]: authentication failure; logname= uid=500 euid=0 tty=:0 ruser= rhost=  user=gt
Dec  7 19:12:06 Nancy kde(pam_unix)[3444]: authentication failure; logname= uid=500 euid=0 tty=:0 ruser= rhost=  user=gt
Dec  7 19:12:09 Nancy kde(pam_unix)[3445]: authentication failure; logname= uid=500 euid=0 tty=:0 ruser= rhost=  user=gt
Dec  7 19:12:11 Nancy kde(pam_unix)[3446]: authentication failure; logname= uid=500 euid=0 tty=:0 ruser= rhost=  user=gt
Dec  7 19:12:14 Nancy kde(pam_unix)[3447]: authentication failure; logname= uid=500 euid=0 tty=:0 ruser= rhost=  user=gt
Dec  7 19:12:16 Nancy kde(pam_unix)[3448]: authentication failure; logname= uid=500 euid=0 tty=:0 ruser= rhost=  user=gt
Dec  7 19:12:19 Nancy kde(pam_unix)[3449]: authentication failure; logname= uid=500 euid=0 tty=:0 ruser= rhost=  user=gt
Dec  7 19:13:17 Nancy kde(pam_unix)[3450]: authentication failure; logname= uid=500 euid=0 tty=:0 ruser= rhost=  user=gt

At that day / time I wasn't at work !! I did a test by unlocking the screen by entering a wrong password and I got:

Dec 11 08:43:55 Nancy kde(pam_unix)[7095]: authentication failure; logname= uid=500 euid=0 tty=:0 ruser= rhost=  user=gt
Dec 11 08:43:58 Nancy kcheckpass[7095]: authentication failure for user gt [uid 500]

Why the line with kcheckpass is not present in the log of Dec 7 ?? Did someone try to unlock the computer by using the keyboard ?

Please help,
Giuseppe

 
 
 

1. How large can /var/log/messages and /var/log/syslog get ?

My /var/log/messages is now over 3 meg, and my syslog is 200+ k. I'm
very curious how far is this going to go ?
Is there a way to restrict their sizes ?

cheers,
Hong Siang.
--
======================================================================
The sticker on the box said, "Windows 95, Windows NT 4.0, or better."
So I installed Linux.
======================================================================
Teo Hong Siang                                   Tel (H): (65)746 2598
Manager, DTG Development Office                      (O): (65)772 7114

2. Multiple Token Ring Adaptors

3. How to close /var/log/syslog and /var/log/messages..

4. MiLan FastPort Printing Problems

5. Help analyzing log file /var/log/messages on RH 5.1

6. C-shell maximum variable name length?

7. Check your ppp.log or ppp.tun0.log in /var/log

8. RH 5.1 install not seeing Intel Etherexpress Pro NIC..

9. ipppd logs in /var/log/ipppd-auth.log ??

10. How can I get ipppd to log in /var/log/ipppd-auth.log ????

11. ATAPI cd-rom creates many, many logs in /var/log/messages

12. /var/log/messages with size of 0 and no logs are written !?

13. logs not in /var/log/messages