Frage zu auth.log

[Duff]

Hallo,

ich habe folgende Meldungen im auth.log:

Code: Alles auswählen

May 23 06:17:01 homer CRON[21283]: (pam_unix) session closed for user root
May 23 06:25:01 homer CRON[21286]: (pam_unix) session opened for user root by (uid=0)
May 23 06:25:02 homer su[21324]: Successful su for nobody by root
May 23 06:25:02 homer su[21324]: + ??? root:nobody
May 23 06:25:02 homer su[21324]: (pam_unix) session opened for user nobody by (uid=0)
May 23 06:25:02 homer su[21324]: (pam_unix) session closed for user nobody
May 23 06:25:02 homer su[21328]: Successful su for nobody by root
May 23 06:25:02 homer su[21328]: + ??? root:nobody
May 23 06:25:02 homer su[21328]: (pam_unix) session opened for user nobody by (uid=0)
May 23 06:25:02 homer su[21328]: (pam_unix) session closed for user nobody
May 23 06:25:02 homer su[21330]: Successful su for nobody by root
May 23 06:25:02 homer su[21330]: + ??? root:nobody
May 23 06:25:02 homer su[21330]: (pam_unix) session opened for user nobody by (uid=0)
May 23 06:25:14 homer su[21330]: (pam_unix) session closed for user nobody
May 23 06:25:16 homer CRON[21286]: (pam_unix) session closed for user root
May 23 07:17:01 homer CRON[21443]: (pam_unix) session opened for user root by (uid=0)
May 23 07:17:01 homer CRON[21443]: (pam_unix) session closed for user root
May 23 08:17:01 homer CRON[21452]: (pam_unix) session opened for user root by (uid=0)
May 23 08:17:01 homer CRON[21452]: (pam_unix) session closed for user root
May 23 09:17:01 homer CRON[21459]: (pam_unix) session opened for user root by (uid=0)
May 23 09:17:01 homer CRON[21459]: (pam_unix) session closed for user root
May 23 10:17:01 homer CRON[21464]: (pam_unix) session opened for user root by (uid=0)
May 23 10:17:01 homer CRON[21464]: (pam_unix) session closed for user root
May 23 11:17:01 homer CRON[21469]: (pam_unix) session opened for user root by (uid=0)
May 23 11:17:01 homer CRON[21469]: (pam_unix) session closed for user root
May 23 12:17:01 homer CRON[21474]: (pam_unix) session opened for user root by (uid=0)
May 23 12:17:01 homer CRON[21474]: (pam_unix) session closed for user root
May 23 13:17:01 homer CRON[21479]: (pam_unix) session opened for user root by (uid=0)
May 23 13:17:01 homer CRON[21479]: (pam_unix) session closed for user root
May 23 14:17:01 homer CRON[21484]: (pam_unix) session opened for user root by (uid=0)
May 23 14:17:01 homer CRON[21484]: (pam_unix) session closed for user root
May 23 15:17:01 homer CRON[21490]: (pam_unix) session opened for user root by (uid=0)
May 23 15:17:01 homer CRON[21490]: (pam_unix) session closed for user root
May 23 16:17:01 homer CRON[21495]: (pam_unix) session opened for user root by (uid=0)
May 23 16:17:01 homer CRON[21495]: (pam_unix) session closed for user root
May 23 16:57:52 homer sshd[21499]: Accepted password for daniel from 80.217.43.111 port 61074 ssh2

Was bedeuten die Meldungen bis auf die letzte, weil da habe ich mich erst auf dem Server eingeloggt?
Danke.

[rendegast]

Das sind Meldungen über die Ausführung von /etc/cron.hourly/.
Siehe auch /etc/crontab.

[Duff]

Ok, danke.

In der DAtei /etc/crontab steht folgendes (default) drin:

Code: Alles auswählen

SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin

# m h dom mon dow user  command
17 *    * * *   root    cd / && run-parts --report /etc/cron.hourly
25 6    * * *   root    test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6    * * 7   root    test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6    1 * *   root    test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#

Diese Datei benötige ich aber eigentlich gar nicht, da ich mit crontab -e meine persönlichen Einträge festgelegt habe.

Code: Alles auswählen

root@homer:~# crontab -l
# m h  dom mon dow   command
# Setzen der Systemzeit nach einer Funkuhr (DCF77-Signal); jede Nacht um 01:10
10 01 * * * /usr/sbin/rdate time.fu-berlin.de > /dev/null
# Image/Backup der gesamten Festplatte hda (IDE-160GB) erstellen; jede Nacht um 02:00
00 02 * * * /root/scripts/backup_hda.sh 2>/dev/null 2>&1

Wo ist denn der Unterschied zwischen den beiden crontab's???

[rendegast]

17 * * * * root cd / && run-parts --report /etc/cron.hourly

17 *, immer um **:17.

Wo ist denn der Unterschied zwischen den beiden crontab's???

schau die die Jobs in /etc/cron.*/ an: -> Systemverwaltung

'crontab -e' ist schon okay für ureigene Usersachen.
Allgemeinere Jobs lagere ich als einzelne Dateien in /etc/cron.d/, das ist mir übersichtlicher




---------------------

# Setzen der Systemzeit nach einer Funkuhr (DCF77-Signal); jede Nacht um 01:10

würde ich öfter machen, alle 15~45 min.

[Duff]

Danke.