Topic: missing parameter in /etc/identd.masq

[sander]

Mar 14 15:45:19 server identd[14792]: missing parameter in /etc/identd.masq: #------------------------------------------------------------
Mar 14 15:45:19 server identd[14792]: Returned: 61143 , 110 : NO-USER
Mar 14 15:46:12 server identd[14812]: missing parameter in /etc/identd.masq: #------------------------------------------------------------
Mar 14 15:46:12 server identd[14812]: Returned: 61149 , 110 : NO-USER
Mar 14 16:15:26 server identd[15231]: missing parameter in /etc/identd.masq: #------------------------------------------------------------
Mar 14 16:15:26 server identd[15231]: Returned: 61155 , 110 : NO-USER
Mar 14 16:30:30 server identd[15443]: missing parameter in /etc/identd.masq: #------------------------------------------------------------
Mar 14 16:30:30 server identd[15443]: Returned: 61161 , 110 : NO-USER
Mar 14 17:00:47 server identd[15881]: missing parameter in /etc/identd.masq: #------------------------------------------------------------
Mar 14 17:00:47 server identd[15881]: Returned: 61173 , 110 : NO-USER
Mar 14 17:01:16 server identd[15895]: missing parameter in /etc/identd.masq: #------------------------------------------------------------
Mar 14 17:01:16 server identd[15895]: Returned: 61180 , 110 : NO-USER
Mar 14 17:46:49 server identd[16534]: missing parameter in /etc/identd.masq: #------------------------------------------------------------
Mar 14 17:46:49 server identd[16534]: Returned: 61189 , 110 : NO-USER
Mar 14 18:04:37 server identd[16785]: missing parameter in /etc/identd.masq: #------------------------------------------------------------
Mar 14 18:04:37 server identd[16785]: Returned: 61191 , 110 : NO-USER

Mar 14 22:16:02 server identd[20258]: missing parameter in /etc/identd.masq: #------------------------------------------------------------
Mar 14 22:16:02 server identd[20258]: Returned: 61316 , 110 : NO-USER

this is what i find in my messages file.
I can't figure out what it could mean

what cold be wrong?

thanks for any help

sander

[Bruce Friedman]

I am seeing the same event on my system, too.  Anybody have an idea how to fix this?

[Terry Brummell]

Just checked, I have it too.  Started back around the 15th of March but could have been earlier as well.  I don't seem to have any messages logs between Feb 3 and March 15, strange.
But anyway, anyone know what this is?

Terry

Alright, I looked at it some more:
Apr 26 23:20:53 pdc identd[14687]: missing parameter in /etc/identd.masq: #------------------------------------------------------------
Apr 26 23:20:42 pdc identd[14687]: Returned: 64483 , 6667 : NO-USER


Something to do with my connection to irc...

Apr 23 17:38:31 pdc identd[19610]: missing parameter in /etc/identd.masq: #------------------------------------------------------------
Apr 23 17:38:31 pdc identd[19610]: Returned: 62708 , 21 : NO-USER

Something to do with me logging into FTP?

Any ideas?

PS-This might also explain why ident on irc changed when I switched to 5.1.2.  When I had 5.0.3, my ident on irc showed as "user65@......" on this machine, and "user66@....." on my other machine.  Now ident shows up as to what I have set in the irc client with a ~ infront of the ident name (which means I wasn't ident'd properly).  Does this mean the Ident isn't acutally working on 5.1.2?

[Urirama]

I've got NO-USER on port 110 about once a minute. It seems they only show up when my desktop computer's OE5 is running and checking for new mail every minute, but it only checks for mail on servers outside our network, not on the SME (5.1.2, server&gateway) itself.  My OE5 is checking for new mail for usernames at those ISPs which aren't usernames on our server.

They could also be caused by trojans (http://www.simovits.com/nyheter9902.html), but the NO-USER hits in my messages log don't seem to indicate that. At least in my case..

My messages log also has a few NO-USERs on port 21, again when I'm FTPing to a server outside our home network, using a username on that server which isn't known on our SME.

BUT - why does the SME check usernames used on other systems against its own? It's none of its business, right?

The line missing parameter in /etc/identd.masq: #----------- shows up in my messages log 7 times, between hundreds of NO-USER lines. They don't seem to be connected, I have no idea when or why the missing param is put in the log.

[Terry Brummell]

I know it's not a trojan as it is doing it before and after I formatted when I switched from XP to 2K.  I do think the 2 lines are related though, as you see in my post they have an event number with eact line that match:
Apr 26 23:20:53 pdc identd[14687]: missing parameter in /etc/identd.masq:
#------------------------------------------------------------
Apr 26 23:20:42 pdc identd[14687]: Returned: 64483 , 6667 : NO-USER

see the "14687" in each one?  Then as the next one happens it has a new event number again on each line that match.

That's interesting about what you say about there not being a name, I can try and change my ident to my username and see if it then Idents me...

[Terry Brummell]

Nope, changing my Ident to my username didn't make a difference....

[Bruce Friedman]

Terry,

I am seeing similar reports as yours, with NO-USER

Apr 27 07:01:01 popeye identd[8714]: missing parameter in /etc/identd.masq: #---
---------------------------------------------------------
Apr 27 07:01:01 popeye identd[8714]: Returned: 62466 , 25 : NO-USER

These always seem to coincide with automated emails that my system is sending on the hourly cron job.

I don't know if that helps, but the correlation appears to be 100% on my system.

regards,
Bruce Friedman

[Jeroen]

Did anyone ever find a solution to this problem?

Jeroen