LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Red Hat
User Name
Password
Red Hat This forum is for the discussion of Red Hat Linux.

Notices

Reply
 
Search this Thread
Old 10-28-2008, 11:29 AM   #1
stan da ork
LQ Newbie
 
Registered: Oct 2008
Posts: 4

Rep: Reputation: 0
Duplicate entries in /var/log/messages


I have four RHEL 4 AS 4 servers. The file /etc/syslog.conf file on all four servers is identical. However, on one of the servers, some of the messages in /var/log/messages are present twice.

For example, if I su to root on one of the servers that isn't having the problem, I get something like this in /var/log/messages:

session opened for user root by me(uid=1000)
session closed for user root

But if I do the same thing on the server with the problem, I get:

session opened for user root by me(uid=1000)
session opened for user root by me(uid=1000)
session closed for user root
session closed for user root

The timestamps on the duplicate messages are identical, as well.

Does anyone know why this might be happening? As I said, the syslog config file is identical, so I don't think that's the problem, but I don't know what else could be causing the problem.
 
Old 10-28-2008, 12:17 PM   #2
anomie
Senior Member
 
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora, Lubuntu, FreeBSD
Posts: 3,930
Blog Entries: 5

Rep: Reputation: Disabled
Have you made any PAM config changes on the server with duplicate messages? I think the module (or at least one of the modules) that is writing to syslog in this case is pam_succeed_if(8).
 
Old 10-29-2008, 09:20 AM   #3
stan da ork
LQ Newbie
 
Registered: Oct 2008
Posts: 4

Original Poster
Rep: Reputation: 0
I don't believe so. Well, the PAM configuration should be identical on all the servers, in any case, so I don't think that's the problem.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
/var/log/messages and /var/log/cron not working sigkill Linux - Software 6 08-09-2008 01:08 PM
Can Samhain log my entries in /var/log/secure and /var/log/mesage to a central server abefroman Linux - Software 2 04-13-2008 04:13 PM
Are these entries a problem in my /var/log/messages jim.thornton Linux - Server 4 02-08-2008 08:16 AM
New Entries in /var/log/messages sathyguy Linux - Security 3 04-26-2006 05:36 AM
/var/log/messages weird entries blizunt7 Linux - Security 5 11-01-2005 05:56 PM


All times are GMT -5. The time now is 12:20 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration