Welcome to the most active Linux Forum on the web.
Go Back > Forums > Linux Forums > Linux - Distributions > Red Hat
User Name
Red Hat This forum is for the discussion of Red Hat Linux.


  Search this Thread
Old 10-28-2008, 11:29 AM   #1
stan da ork
LQ Newbie
Registered: Oct 2008
Posts: 4

Rep: Reputation: 0
Duplicate entries in /var/log/messages

I have four RHEL 4 AS 4 servers. The file /etc/syslog.conf file on all four servers is identical. However, on one of the servers, some of the messages in /var/log/messages are present twice.

For example, if I su to root on one of the servers that isn't having the problem, I get something like this in /var/log/messages:

session opened for user root by me(uid=1000)
session closed for user root

But if I do the same thing on the server with the problem, I get:

session opened for user root by me(uid=1000)
session opened for user root by me(uid=1000)
session closed for user root
session closed for user root

The timestamps on the duplicate messages are identical, as well.

Does anyone know why this might be happening? As I said, the syslog config file is identical, so I don't think that's the problem, but I don't know what else could be causing the problem.
Old 10-28-2008, 12:17 PM   #2
Senior Member
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora
Posts: 3,935
Blog Entries: 5

Rep: Reputation: Disabled
Have you made any PAM config changes on the server with duplicate messages? I think the module (or at least one of the modules) that is writing to syslog in this case is pam_succeed_if(8).
Old 10-29-2008, 09:20 AM   #3
stan da ork
LQ Newbie
Registered: Oct 2008
Posts: 4

Original Poster
Rep: Reputation: 0
I don't believe so. Well, the PAM configuration should be identical on all the servers, in any case, so I don't think that's the problem.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
/var/log/messages and /var/log/cron not working sigkill Linux - Software 6 08-09-2008 01:08 PM
Can Samhain log my entries in /var/log/secure and /var/log/mesage to a central server abefroman Linux - Software 2 04-13-2008 04:13 PM
Are these entries a problem in my /var/log/messages jim.thornton Linux - Server 4 02-08-2008 08:16 AM
New Entries in /var/log/messages sathyguy Linux - Security 3 04-26-2006 05:36 AM
/var/log/messages weird entries blizunt7 Linux - Security 5 11-01-2005 05:56 PM

All times are GMT -5. The time now is 03:46 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration