syslog message

[jack Hu_1]

Dear Sir:
please help me to check this message
and how can I do?
thanks.
the message:
pam_authenticate: Authentication failed 13421
7759

Best Regards
jack Hu

[U.SivaKumar_2]

hi,
u need not worry about this error. PAM is
pluggable authentication module , it is an
enhanced security feature.
The error might have been logged because some user there might have given improper password
during his login. ( may be due to typematic error ).

regards,
U.SivaKumar

[Niraj Kumar Verma · Accepted solution]

Hi,

you can know more about pam auth see below

http://java.sun.com/security/jaas/doc/pam.html

[jack Hu_1]

Dear Sir:
How can I avoid these message.
'cause some of my server will not show these
kind of message.
thanks

Best Regards.
Jack Hu

[Steven Sim Kok Leong]

Hi,

Modify your /etc/pam.conf to disable the modules you do not wish to use. If you do not want to use any, simply move /etc/pam.conf away.

As always, perform a full backup or make_tape_recovery so that in case anything goes wrong, you can always fall back on your configuration.

man pam.conf for more details.

Hope this helps. Regards.

Steven Sim Kok Leong

[Steven Sim Kok Leong]

Hi,

Note that /etc/pam.conf is required i.e. mandatory for normal logins. I would advise against modifying /etc/pam.conf or moving it away.

If you want to mask off the error from syslog, you have to modify /etc/syslog.conf according to the facility.level used by pam.

Extracted from the pam.conf man page:

If a module does not exist or can not be opened, then the pam.conf entry is ignored and an error will be logged through syslog(3C) at the LOG_CRIT level.

Hope this helps. Regards.

Steven Sim Kok Leong