crond pam log messages in /var/log/messages, root open closed session

speedok

Verified User
Joined
Nov 12, 2005
Messages
14
Location
Netherlands
Nov 13 04:04:01 s01 crond(pam_unix)[25503]: session closed for user root
Nov 13 04:04:01 s01 crond(pam_unix)[25505]: session closed for user root
Nov 13 04:05:01 s01 crond(pam_unix)[25509]: session opened for user root by (uid=0)
Nov 13 04:05:01 s01 crond(pam_unix)[25511]: session opened for user root by (uid=0)
Nov 13 04:05:01 s01 crond(pam_unix)[25509]: session closed for user root
Nov 13 04:05:01 s01 crond(pam_unix)[25511]: session closed for user root
Nov 13 04:06:01 s01 crond(pam_unix)[25515]: session opened for user root by (uid=0)
Nov 13 04:06:01 s01 crond(pam_unix)[25517]: session opened for user root by (uid=0)
Nov 13 04:06:01 s01 crond(pam_unix)[25515]: session closed for user root
Nov 13 04:06:01 s01 crond(pam_unix)[25517]: session closed for user root

This is logged in the /var/log/messages file every minute on FC3. I guess it's normal because DA is using the cron everytime.

Is there a way to avoid this messages in the /var/log/messages file without losing important information ?
 
I am having the same messages in my log.

Someone knows why they are in there every minute?

Also running Fedora 3

:confused:
 
Root is running a cron job every minute. Log into the system as root and issue the command:
Code:
crontab -l
And that should list all the cronjobs for that user, in this case root.
 
I would take a look at the /var/log/cron file to see what exactly is running every minute.

From what I read you might have a cron.minute file that runs commands every minute. So that is probably why you are getting a lot of those cron messages. The only thing you might want to do is put those messages in another file. To do that you need to edit /etc/syslog.conf and change it like so:
Code:
#*.info;mail.none;news.none;authpriv.none;cron.none            
/var/log/messages
*.info;mail.none;news.none;authpriv.none;cron.none;auth.!=info 
/var/log/messages
 
#The auth.info messages into a different log file.
auth.info                                              
/var/log/auth.info
The !=info tells it to log all the auth messages except info to /var/log/messages and the other line with just the auth.info and the file tells it to put all auth.info messages to that file.
 
Last edited:
Back
Top