LinuxQuestions.org
Visit the LQ Articles and Editorials section
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices



Reply
 
Search this Thread
Old 08-06-2005, 09:49 AM   #1
redneon
Member
 
Registered: Aug 2003
Posts: 103

Rep: Reputation: 15
Strange messages


Does anyone know why I keep getting messages output to the console such as "login(pam_unix)[2252]: session opened for user root by (uid=0)"?

I'm assuming they're kernel messages and I have a module enabled in the kernel to make them appear but I can't figure out how to stop them
 
Old 08-06-2005, 10:43 AM   #2
trickykid
Guru
 
Registered: Jan 2001
Posts: 24,133

Rep: Reputation: 199Reputation: 199
The secret is in your /etc/syslog.conf file..
 
Old 08-06-2005, 10:49 AM   #3
redneon
Member
 
Registered: Aug 2003
Posts: 103

Original Poster
Rep: Reputation: 15
Quote:
Originally posted by trickykid
The secret is in your /etc/syslog.conf file..
That was the first thing I checked

kern.* is commented out so no messages should appear on the console.

This is my syslog.conf:

Code:
# /etc/syslog.conf
# For info about the format of this file, see "man syslog.conf"
# and /usr/doc/sysklogd/README.linux.  Note the '-' prefixing some
# of these entries;  this omits syncing the file after every logging.
# In the event of a crash, some log information might be lost, so
# if this is a concern to you then you might want to remove the '-'.
# Be advised this will cause a performation loss if you're using
# programs that do heavy logging.

# Uncomment this to see kernel messages on the console.
#kern.*							/dev/console

# Log anything 'info' or higher, but lower than 'warn'.
# Exclude authpriv, cron, mail, and news.  These are logged elsewhere.
*.info;*.!warn;\
	authpriv.none;cron.none;mail.none;news.none	-/var/log/messages

# Log anything 'warn' or higher.
# Exclude authpriv, cron, mail, and news.  These are logged elsewhere.
*.warn;\
	authpriv.none;cron.none;mail.none;news.none	-/var/log/syslog

# Debugging information is logged here.
*.=debug						-/var/log/debug

# Private authentication message logging:
authpriv.*						-/var/log/secure

# Cron related logs:
cron.*							-/var/log/cron

# Mail related logs:
mail.*							-/var/log/maillog

# Emergency level messages go to all users:
*.emerg							*

# This log is for news and uucp errors:
uucp,news.crit						-/var/log/spooler

# Uncomment these if you'd like INN to keep logs on everything.
# You won't need this if you don't run INN (the InterNetNews daemon).
#news.=crit					-/var/log/news/news.crit
#news.=err					-/var/log/news/news.err
#news.notice					-/var/log/news/news.notice
Have I missed something?
 
Old 08-06-2005, 10:59 AM   #4
trickykid
Guru
 
Registered: Jan 2001
Posts: 24,133

Rep: Reputation: 199Reputation: 199
Do you see any other messages besides the one you provided? If not, perhaps you need to check your pam configurations as that would probably be the source in itself of logging it's own messages to the console.
 
Old 08-06-2005, 11:02 AM   #5
redneon
Member
 
Registered: Aug 2003
Posts: 103

Original Poster
Rep: Reputation: 15
Yeah. Another common one is to do with my wireless NIC and that's "eth0: New link status: AP In Range(0005)".

Thinking about it, the login one and that one are the only ones I get I think. I also get one when I log out too.
 
Old 08-06-2005, 11:08 AM   #6
trickykid
Guru
 
Registered: Jan 2001
Posts: 24,133

Rep: Reputation: 199Reputation: 199
Uncomment it and change /dev/console to a file or another tty to test; of course after your changes restart syslogd.
 
Old 08-06-2005, 11:12 AM   #7
redneon
Member
 
Registered: Aug 2003
Posts: 103

Original Poster
Rep: Reputation: 15
I've just done "/etc/rc.d/rc.syslog stop" to stop the logger but I'm still getting the messages on the console which leads me to think it could be something else.
 
Old 08-06-2005, 12:29 PM   #8
trickykid
Guru
 
Registered: Jan 2001
Posts: 24,133

Rep: Reputation: 199Reputation: 199
Quote:
Originally posted by redneon
I've just done "/etc/rc.d/rc.syslog stop" to stop the logger but I'm still getting the messages on the console which leads me to think it could be something else.
I would assume so as well..
 
Old 08-06-2005, 06:02 PM   #9
redneon
Member
 
Registered: Aug 2003
Posts: 103

Original Poster
Rep: Reputation: 15
Quote:
Originally posted by trickykid
I would assume so as well..
Any ideas what else could be causing it?
 
Old 08-06-2005, 06:17 PM   #10
trickykid
Guru
 
Registered: Jan 2001
Posts: 24,133

Rep: Reputation: 199Reputation: 199
Quote:
Originally posted by redneon
Any ideas what else could be causing it?
Not sure, don't know anything about your system except of what you've provided here.
 
Old 08-06-2005, 06:44 PM   #11
redneon
Member
 
Registered: Aug 2003
Posts: 103

Original Poster
Rep: Reputation: 15
It's a clean Slackware 10.1 install. I haven't installed anything on top of it yet. That's why I'm assuming it's a kernel module.
 
Old 08-06-2005, 08:40 PM   #12
trickykid
Guru
 
Registered: Jan 2001
Posts: 24,133

Rep: Reputation: 199Reputation: 199
I've never had this issue and by default Slackware doesn't log kernel messages to the console. This is a base install with nothing whatsoever added after the initial install?
 
Old 08-07-2005, 05:04 AM   #13
redneon
Member
 
Registered: Aug 2003
Posts: 103

Original Poster
Rep: Reputation: 15
Well I've installed the NVidia drivers, TightVNC server and Dropline Gnome on top but I did exactly the same on another machine and there are no messages being output to the console on that one.

I may just have to format and reinstall Slackware.
 
Old 08-07-2005, 06:40 AM   #14
trickykid
Guru
 
Registered: Jan 2001
Posts: 24,133

Rep: Reputation: 199Reputation: 199
Quote:
Originally posted by redneon
Well I've installed the NVidia drivers, TightVNC server and Dropline Gnome on top but I did exactly the same on another machine and there are no messages being output to the console on that one.

I may just have to format and reinstall Slackware.
It's Dropline Gnome which installs PAM and I'm not sure where it would keep that configuration at if it's overriding the syslog.conf file. Dropline installs a bunch of crap that doesn't even relate to Gnome, I use to like their idea but I think they've gone a little overboard with the bloated crap they use. Sorry, just my opinion on that matter.
 
Old 08-07-2005, 07:23 AM   #15
redneon
Member
 
Registered: Aug 2003
Posts: 103

Original Poster
Rep: Reputation: 15
I agree. They do install a lot of stuff that isn't part of gnome which is annoying. I think I just use it as a force of habit. I started using it ages ago and have just gone with the flow. I might do a reinstall of Slackware and just install gnome from source or perhaps look for some Slackware 10.1 gnome binaries for the latest release of gnome.

In the meantime I'll look for the pam configuration file and see if I can make sense of it
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Strange messages in console kenneho Linux - Networking 6 08-12-2005 04:23 PM
Strange ACPI Messages Naveg Linux - Hardware 3 06-16-2005 04:46 PM
Strange messages tuxunkhamon Linux - Wireless Networking 1 05-30-2005 11:49 AM
strange messages on my consoles atzalan Linux - Networking 1 05-11-2005 02:55 AM
Strange messages after restart J_Szucs Linux - Newbie 3 01-03-2003 10:53 AM


All times are GMT -5. The time now is 03:46 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration