Curious Log File Entry

Ben Beeson beesond001 at hawaii.rr.com
Wed Mar 28 01:41:30 PST 2001


Aloha all,

	Does anyone have any clue how the below entry could end up in my log
files?  I am pretty sure no one here tried to log in as user "news" at 4
a.m......  This is curious because I've never seen this one before.  Should I
block news (port 119) in my firewall????

 grep news /var/log/messages
Mar 25 04:03:42 [My IP Address Here ] PAM_pwdb[1442]: (su) session opened for
user news by (uid=0)   

Mar 25 04:03:42 [My IP Address Here ] pam_xauth[1442]:
do_file: could not create dir /var/spool/news/.xauth 

Mar 25 04:03:42 [My IP Address Here ] 
PAM_pwdb[1442]: (su) session closed for user news 

Mar 25 4:03:42 [My IP Address Here ] pam_xauth[1442]: do_file: could not
create dir /var/spool/news/.xauth 

Mar 27 04:02:17 localhost PAM_pwdb[6857]:
(su) session opened for user news by (uid=0) Mar 27 04:02:17 localhost
PAM_pwdb[6857]: (su) session closed for user news  



Thanks,

Ben 



More information about the LUAU mailing list