OK, it sure was, but who did It? When I change user using "su" the message looks like this: Oct 8 06:37:46 server su(pam_unix)[17201]: session opened for user root by mylogin (uid=2423) Oct 8 06:37:51 server su(pam_unix)[17201]: session closed for user root So, its not the same thing... Thanks anyway. ----- Original Message ----- From: "Mathias Krüger" <m.krueger@digidrops.de> To: <pam-list@redhat.com> Sent: Friday, October 11, 2002 9:33 PM Subject: Re: Unknown PAM message > guess that was change user > > you logged in with su. > > eto wsjo! > > quoting stw@hotlink.com.br, 11.10.2002 17:11:30: > > I´m in trouble trying to figure out the meaning of the following > > message in /var/log/messages on my Red Hat 7.2 (kernel 2.4.7- > > 10custom) server: > > > > Oct 8 06:37:46 server su(pam_unix)[17201]: session opened for > > user root by (uid=0) > > Oct 8 06:37:51 server su(pam_unix)[17201]: session closed for user > > root > > > > First I thought It was something related to a root login on the console, > > but the message in that case wouldn´t be like this one. Notice the > > missing username data after the "by". I´m lost. HELP PLEASE > > > > Thanks > > > > Sergio Tschá > > Tha > > > > > > > > _______________________________________________ > > > > Pam-list@redhat.com > > https://listman.redhat.com/mailman/listinfo/pam-list > > -- > ˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇ > ˇˇˇhttp://www.digidrops.deˇˇˇ > ˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇˇ > > > > _______________________________________________ > > Pam-list@redhat.com > https://listman.redhat.com/mailman/listinfo/pam-list > > _______________________________________________ Pam-list@redhat.com https://listman.redhat.com/mailman/listinfo/pam-list