rodsLog is flooded by that user rods is trying to auth from kali

[jhagberg]

Jun 26 01:15:39 pid:836 NOTICE: rsAuthCheck user rods#ssUppnexZone
Jun 26 01:15:39 pid:836 NOTICE: rsAuthResponse set proxy authFlag to 5, client authFlag to 5, user:rods#ssUppnexZone proxy:rods client:rods
Jun 26 01:15:39 pid:836 NOTICE: readAndProcClientMsg: received disconnect msg from client
Jun 26 01:15:39 pid:836 NOTICE: Agent exiting with status = 0
Jun 26 01:15:39 pid:18791 NOTICE: Agent process 836 exited with status 0
Jun 26 01:15:39 pid:18791 NOTICE: Agent process 847 started for puser=rods and cuser=rods from 130.238.139.200
Jun 26 01:15:39 pid:847 NOTICE: rsAuthCheck user rods#ssUppnexZone
Jun 26 01:15:39 pid:847 NOTICE: rsAuthResponse set proxy authFlag to 5, client authFlag to 5, user:rods#ssUppnexZone proxy:rods client:rods
Jun 26 01:15:39 pid:847 NOTICE: readAndProcClientMsg: received disconnect msg from client
Jun 26 01:15:39 pid:847 NOTICE: Agent exiting with status = 0
Jun 26 01:15:39 pid:18791 NOTICE: Agent process 847 exited with status 0
Jun 26 01:15:39 pid:18791 NOTICE: Agent process 852 started for puser=rods and cuser=rods from 130.238.139.200

this is filling up the log. Is a cron script doing something strange?

[samuell]

Possibly! Will have a look at what runs at that time ...

// Samuel

2012/6/27 Jonas Hagberg <
reply@reply.github.com

Jun 26 01:15:39 pid:836 NOTICE: rsAuthCheck user rods#ssUppnexZone
Jun 26 01:15:39 pid:836 NOTICE: rsAuthResponse set proxy authFlag to 5,
client authFlag to 5, user:rods#ssUppnexZone proxy:rods client:rods
Jun 26 01:15:39 pid:836 NOTICE: readAndProcClientMsg: received disconnect
msg from client
Jun 26 01:15:39 pid:836 NOTICE: Agent exiting with status = 0
Jun 26 01:15:39 pid:18791 NOTICE: Agent process 836 exited with status 0
Jun 26 01:15:39 pid:18791 NOTICE: Agent process 847 started for puser=rods
and cuser=rods from 130.238.139.200
Jun 26 01:15:39 pid:847 NOTICE: rsAuthCheck user rods#ssUppnexZone
Jun 26 01:15:39 pid:847 NOTICE: rsAuthResponse set proxy authFlag to 5,
client authFlag to 5, user:rods#ssUppnexZone proxy:rods client:rods
Jun 26 01:15:39 pid:847 NOTICE: readAndProcClientMsg: received disconnect
msg from client
Jun 26 01:15:39 pid:847 NOTICE: Agent exiting with status = 0
Jun 26 01:15:39 pid:18791 NOTICE: Agent process 847 exited with status 0
Jun 26 01:15:39 pid:18791 NOTICE: Agent process 852 started for puser=rods
and cuser=rods from 130.238.139.200

this is filling up the log. Is a cron script doing something strange?

---

Reply to this email directly or view it on GitHub:
#39

[samuell]

I see that this happens many times (34 times or so) per minute. There's no cron job running that often (they run max once per minute). Any other ideas @jhagberg or @pontus ?

[brainstorm]

https://groups.google.com/forum/?fromgroups=#!topic/irod-chat/s_peXdSMkvg

[samuell]

Thanks @brainstorm , will check if there is a more suitable logging level.