Hi,
My Server rebooted at lunchtime and I dont know why. Nobody has root password or should be in server room. Does the log entries tell anything?
May 31 12:01:01 www crond(pam_unix)[4103]: session opened for user root by (uid=0)
May 31 12:01:01 www crond(pam_unix)[4103]: session closed for user root
May 31 12:27:49 www login(pam_unix)[3711]: check pass; user unknown
May 31 12:27:49 www login(pam_unix)[3711]: authentication failure; logname= uid=0 euid=0 tty=tty1 ruser= rhost=
May 31 12:27:52 www login[3711]: FAILED LOGIN 1 FROM (null) FOR skippy, Authentication failure
May 31 12:28:07 www shutdown: shutting down for system reboot
May 31 12:28:07 www init: Switching to runlevel: 6
May 31 12:28:08 www haldaemon: haldaemon -TERM succeeded
May 31 12:28:08 www messagebus: messagebus -TERM succeeded
May 31 12:28:08 www atalk: papd shutdown succeeded
May 31 12:28:09 www atalk: Unregistering www:Workstation: succeeded
May 31 12:28:09 www atalk: Unregistering www:netatalk: succeeded
May 31 12:28:09 www atalkd[3415]: done
May 31 12:28:09 www atalk: atalkd shutdown succeeded
May 31 12:28:09 www afpd[3643]: shutting down on signal 15
May 31 12:28:09 www atalk: afpd shutdown succeeded
Thanks.
1 Replies
1915 Views