updated timestamp

[jkmartha]

fedora core - 2.

1.
I started IMAP server ( dovecot ), apache , sendmail & used the webmail application ( squirrelmail ) to use mail services. After that, I have been getting some strange messages in my logfiles which are described in the following paragraph :

userhelper[6193]: pam_timestamp: updated timestamp file `/var/run/sudo/root/unknown'
userhelper[6224]: running '/usr/share/system-config-users/system-config-users' with
root privileges on behalf of 'root'
dovecot-auth: pam_succeed_if: requirement "uid < 100" not met by user "user1"
what exactly is this ??
2.
when i run
# mail
the following message appears....


################### LogWatch 5.1 (02/03/04) ####################
Processing Initiated: Tue May 10 10:23:42 2005
Date Range Processed: yesterday
Detail Level of Output: 0
Logfiles for Host: <hostname>
################################################## ##############

--------------------- httpd Begin ------------------------

A total of 2 sites probed the server
216.208.86.75
61.157.198.134

A total of 2 unidentified 'other' records logged
CONNECT msa.hinet.net:25 HTTP/1.0 with response code(s) 405 405 405
CONNECT 65.54.190.179:25 HTTP/1.1 with response code(s) 405

---------------------- httpd End -------------------------



who is probing my server & why ??

[aceqbaceq]

i can add 2 cents about the following row:

"dovecot-auth: pam_succeed_if: requirement "uid < 100" not met by user "user1""

each program in linux do not provide authentication itself, it uses pam for this.

there are numerous files in /etc/pam.d/ , they describe to pam how to do authentication in some particular case. in each file there are several rows. each row is a condition for successfull authentication overall.

you can find the following row in/etc/pam.d/system-auth

account sufficient /lib/security/$ISA/pam_succeded_if.so uid < 100

the point is the row has option "sufficient". it means if condition in the row = true then authentication process is treated as successfull and pam does not check below rows, BUT if condition = false then authentication is not treated as failed, no- pam just notifies in log file that condition is false

pam_succeed_if: requirement "uid < 100" not met by user

and continue checking other rows laying below.

so

"dovecot-auth: pam_succeed_if: requirement "uid < 100" not met by user "user1""

is just notification that user1 has uid < 100 and nothing else