LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 12-16-2012, 01:11 PM   #1
gbao256
LQ Newbie
 
Registered: Dec 2012
Posts: 10

Rep: Reputation: Disabled
Unhappy auth.log stop working after change


I was tried to change auth.log in /var/log/ and after that all of my login did not log. I dont know what is wrong. I tried to restart and it work again. After that, I changed it and it stop working. So I think some of service was stop. Anybody can tell me what service name. I dont want to reboot
 
Old 12-16-2012, 02:01 PM   #2
eSelix
Senior Member
 
Registered: Oct 2009
Location: Wroclaw, Poland
Distribution: Arch, Kubuntu
Posts: 1,254

Rep: Reputation: 314Reputation: 314Reputation: 314Reputation: 314
This log file is opened by log application for writing. When you "change" this file, you actually delete it and create new file, but the log application still use a handle to the old file, which is now "hidden" in filesystem and will be deleted when log application close handle, at the end of working, example at system rebooting. To make a change you would first stop logging program (to close handles) and then delete or change log file, and restart log application. The log program depends on distribution you are using, search for "syslog" in name.

Anyway, log files is not intendent to be changed by hand, so please specify what you want to achieve, maybe you get better solution.
 
Old 12-16-2012, 05:33 PM   #3
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.9, Centos 7.3
Posts: 17,395

Rep: Reputation: 2395Reputation: 2395Reputation: 2395Reputation: 2395Reputation: 2395Reputation: 2395Reputation: 2395Reputation: 2395Reputation: 2395Reputation: 2395Reputation: 2395
This is true
Quote:
Anyway, log files is not intendent to be changed by hand, so please specify what you want to achieve, maybe you get better solution.
Why are you messing with it?
 
Old 12-16-2012, 11:09 PM   #4
gbao256
LQ Newbie
 
Registered: Dec 2012
Posts: 10

Original Poster
Rep: Reputation: Disabled
thanks for your help. I can do this now.
I want to test cracking tool so I remove the log file and tail it when I use hydra or ncrack to cracking password.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Postfix stop working after you change an Alias milindras Ubuntu 9 11-19-2009 09:17 AM
Perl or PHP Script that can tail /var/log/auth.log - two-factor authentication tdnnash25 Linux - Server 1 06-18-2009 08:36 PM
the significance and name of the 5th column of /var/log/auth.log (ubuntu server)? CoffeeKing!!! Linux - Security 4 02-05-2009 07:32 AM
What the %$#@ is pam_unix (cron:session) doing every ten minutes? (/var/log/auth.log) CoffeeKing!!! Linux - Security 3 02-05-2009 07:07 AM
/var/log/auth.log doens't have correct date and hostname (Solution) alfmarius Linux - Newbie 0 10-07-2008 06:09 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 08:04 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration