logwatch mesgs about crond

[Alexander Dalloz]

Am Fr, den 13.08.2004 schrieb Harry Putnam um 16:56:

> I've been having a problem with cron dying unexpectedly.  I haven't
> worked real hard at debugging it yet but I did run accross these
> messages in mail to root from `logwatch'
> (wrapped for mail)
> 
>   ------------- Connections (secure-log) Begin ---------------
> 
>   **Unmatched Entries**
> 
>   crond[20751]: pam_succeed_if: requirement "uid < 100" not met by user
>   "reader"
>   crond[20853]: pam_succeed_if: requirement "uid < 100" not met by user
>   "reader"
>   crond[21051]: pam_succeed_if: requirement "uid < 100" not met by user
>   "reader"
> [...]
> 
> I have about 300 of them in last message from logwatch and similar
> numbers in several others.

You have a cronjob running with which user reader logs in automatically.
The secure log entries are caused by /etc/pam.d/system-auth:

account     sufficient    /lib/security/$ISA/pam_succeed_if.so uid < 100

> Any one know for sure what they mean?

Alexander


-- 
Alexander Dalloz | Enger, Germany | GPG key 1024D/ED695653 1999-07-13
Fedora GNU/Linux Core 2 (Tettnang) kernel 2.6.7-1.494.2.2smp 
Serendipity 17:47:10 up 9 days, 11:14, load average: 0.64, 0.52, 0.37 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
URL: <http://listman.redhat.com/archives/fedora-test-list/attachments/20040813/961700ec/attachment.sig>