Messaggio di spam spammed che coinvolge pam_sm_authenticate e Kerberos

0

Ogni minuto è registrato nel mio system.log:

Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Got user: andrew
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Got ruser: (null)
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Got service: sshd
Aug 19 12:20:00 server.local java[66]: in od_principal_for_user(): No authentication authority returned
Aug 19 12:20:00 server.local java[66]: in od_principal_for_user(): failed: 7
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Failed to determine Kerberos principal name.
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Done cleanup3
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Kerberos 5 refuses you
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): pam_sm_authenticate: ntlm
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Got user: andrew
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Got ruser: (null)
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Got service: sshd
Aug 19 12:20:00 server.local java[66]: in od_principal_for_user(): No authentication authority returned
Aug 19 12:20:00 server.local java[66]: in od_principal_for_user(): failed: 7
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Failed to determine Kerberos principal name.
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Done cleanup3
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Kerberos 5 refuses you
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): pam_sm_authenticate: ntlm
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Got user: andrew
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Got ruser: (null)
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Got service: sshd
Aug 19 12:20:00 server.local java[66]: in od_principal_for_user(): No authentication authority returned
Aug 19 12:20:00 server.local java[66]: in od_principal_for_user(): failed: 7
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Failed to determine Kerberos principal name.
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Done cleanup3
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Kerberos 5 refuses you
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): pam_sm_authenticate: ntlm
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Got user: andrew
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Got ruser: (null)
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Got service: sshd
Aug 19 12:20:00 server.local java[66]: in od_principal_for_user(): No authentication authority returned
Aug 19 12:20:00 server.local java[66]: in od_principal_for_user(): failed: 7
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Failed to determine Kerberos principal name.
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Done cleanup3
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Kerberos 5 refuses you
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): pam_sm_authenticate: ntlm
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Got user: andrew
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Got ruser: (null)
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Got service: sshd
Aug 19 12:20:00 server.local java[66]: in od_principal_for_user(): No authentication authority returned
Aug 19 12:20:00 server.local java[66]: in od_principal_for_user(): failed: 7
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Failed to determine Kerberos principal name.
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Done cleanup3
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): Kerberos 5 refuses you
Aug 19 12:20:00 server.local java[66]: in pam_sm_authenticate(): pam_sm_authenticate: ntlm

Ho disattivato ssh (e posso confermare che è disattivato). Ho installato OSX Server e ho attivato i servizi ftp e siti web. Ho alcuni lavori cron eseguiti ogni minuto, ma non dovrebbero usare sshd, giusto?

Che cosa significano questi messaggi di registro?

    
posta Santa Claus 19.08.2013 - 18:23
fonte

0 risposte

Leggi altre domande sui tag