Syslog messages...

stevemad · 10-14-2005, 05:00 AM

From the first time I installed slackware 10.2 the syslog is full with the following message

Code:

Oct 14 01:09:11 storeserver sshd[1377]: error: Could not get shadow information for NOUSER
Oct 14 01:09:14 storeserver sshd[1380]: error: Could not get shadow information for NOUSER
Oct 14 01:09:16 storeserver sshd[1383]: error: Could not get shadow information for NOUSER
Oct 14 01:09:19 storeserver sshd[1386]: error: Could not get shadow information for NOUSER
Oct 14 01:09:21 storeserver sshd[1389]: error: Could not get shadow information for NOUSER
Oct 14 01:09:24 storeserver sshd[1392]: error: Could not get shadow information for NOUSER
Oct 14 01:09:26 storeserver sshd[1395]: error: Could not get shadow information for NOUSER
Oct 14 01:09:29 storeserver sshd[1398]: error: Could not get shadow information for NOUSER
Oct 14 01:09:31 storeserver sshd[1401]: error: Could not get shadow information for NOUSER

Almost every two sec!Any ideas?

rino.caldelli · 10-14-2005, 04:55 PM

where did you read those sylog messages /etc/something???? or /var/log/something????

http://rinonapo.atspace.com

stevemad · 10-15-2005, 03:11 PM

var/log/syslog

dunric · 10-15-2005, 03:25 PM

somebody tries to log-in on sshd server with nonexisting user account name

egag · 10-15-2005, 03:45 PM

yip, looks like someone's trying to log in.
there should be more info in /var/log/messages.
( look for the date and time you found in the syslog )

egag