Arch Linux

graysky

Wiki Maintainer

From: :wq

Registered: 2008-12-01

Posts: 10,605

Website

/var/log/auth.log full of entries like this - why?

All I did recently was replace crond with cronie... I don't have anything in either root's crontab or in facade's crontab what would explain this following (this is just a sample, it goes on and on like this):

Aug 28 04:01:01 localhost /USR/SBIN/CROND[14119]: pam_unix(crond:session): session closed for user root
Aug 28 04:01:01 localhost /USR/SBIN/CROND[14120]: pam_unix(crond:session): session closed for user facade
Aug 28 04:02:01 localhost /usr/sbin/crond[14138]: pam_unix(crond:session): session opened for user facade by (uid=0)
Aug 28 04:02:01 localhost /USR/SBIN/CROND[14138]: pam_unix(crond:session): session closed for user facade
Aug 28 04:03:01 localhost /usr/sbin/crond[14163]: pam_unix(crond:session): session opened for user facade by (uid=0)
Aug 28 04:03:01 localhost /USR/SBIN/CROND[14163]: pam_unix(crond:session): session closed for user facade
Aug 28 04:04:01 localhost /usr/sbin/crond[14178]: pam_unix(crond:session): session opened for user facade by (uid=0)
Aug 28 04:04:02 localhost /USR/SBIN/CROND[14178]: pam_unix(crond:session): session closed for user facade
Aug 28 04:05:01 localhost /usr/sbin/crond[14187]: pam_unix(crond:session): session opened for user facade by (uid=0)
Aug 28 04:05:01 localhost /USR/SBIN/CROND[14187]: pam_unix(crond:session): session closed for user facade
Aug 28 04:06:01 localhost /usr/sbin/crond[14206]: pam_unix(crond:session): session opened for user facade by (uid=0)
Aug 28 04:06:01 localhost /USR/SBIN/CROND[14206]: pam_unix(crond:session): session closed for user facade
Aug 28 04:07:01 localhost /usr/sbin/crond[14215]: pam_unix(crond:session): session opened for user facade by (uid=0)
Aug 28 04:07:01 localhost /USR/SBIN/CROND[14215]: pam_unix(crond:session): session closed for user facade
Aug 28 04:08:01 localhost /usr/sbin/crond[14245]: pam_unix(crond:session): session opened for user facade by (uid=0)
Aug 28 04:08:01 localhost /USR/SBIN/CROND[14245]: pam_unix(crond:session): session closed for user facade
Aug 28 04:09:01 localhost /usr/sbin/crond[14260]: pam_unix(crond:session): session opened for user facade by (uid=0)
Aug 28 04:09:01 localhost /USR/SBIN/CROND[14260]: pam_unix(crond:session): session closed for user facade
Aug 28 04:10:01 localhost /usr/sbin/crond[14274]: pam_unix(crond:session): session opened for user facade by (uid=0)
Aug 28 04:10:01 localhost /USR/SBIN/CROND[14274]: pam_unix(crond:session): session closed for user facade
Aug 28 04:11:01 localhost /usr/sbin/crond[14288]: pam_unix(crond:session): session opened for user facade by (uid=0)

Last edited by graysky (2011-08-29 08:26:58)

---

CPU-optimized Linux-ck packages @ Repo-ck  • AUR packages • Zsh and other configs

Leonid.I

Member

From: Aethyr

Registered: 2009-03-22

Posts: 999

Re: /var/log/auth.log full of entries like this - why?

You mean dcron (not crond)? It seems that there is an empty crontab for facade, because crond logs in, sees nothing and logs out... Are you sure you cleaned up /var/spool/cron and other dirs from dcron?

---

Arch Linux is more than just GNU/Linux -- it's an adventure
pkill -9 systemd

graysky

Wiki Maintainer

From: :wq

Registered: 2008-12-01

Posts: 10,605

Website

Re: /var/log/auth.log full of entries like this - why?

Yeah, dcron, my bad.  I reverted back to dcron and all is well.

---

CPU-optimized Linux-ck packages @ Repo-ck  • AUR packages • Zsh and other configs