Koozali.org: home of the SME Server

Obsolete Releases => SME Server 6.x => Topic started by: seabro on May 31, 2006, 11:32:51 PM

Title: Help with Log Reading!
Post by: seabro on May 31, 2006, 11:32:51 PM

Hi,

My Server rebooted at lunchtime and I dont know why.  Nobody has root password or should be in server room.  Does the log entries tell anything?

May 31 12:01:01 www crond(pam_unix)[4103]: session opened for user root by (uid=0)
May 31 12:01:01 www crond(pam_unix)[4103]: session closed for user root
May 31 12:27:49 www login(pam_unix)[3711]: check pass; user unknown
May 31 12:27:49 www login(pam_unix)[3711]: authentication failure; logname= uid=0 euid=0 tty=tty1 ruser= rhost=
May 31 12:27:52 www login[3711]: FAILED LOGIN 1 FROM (null) FOR skippy, Authentication failure
May 31 12:28:07 www shutdown: shutting down for system reboot
May 31 12:28:07 www init: Switching to runlevel: 6
May 31 12:28:08 www haldaemon: haldaemon -TERM succeeded
May 31 12:28:08 www messagebus: messagebus -TERM succeeded
May 31 12:28:08 www atalk: papd shutdown succeeded
May 31 12:28:09 www atalk:   Unregistering www:Workstation: succeeded
May 31 12:28:09 www atalk:   Unregistering www:netatalk: succeeded
May 31 12:28:09 www atalkd[3415]: done
May 31 12:28:09 www atalk: atalkd shutdown succeeded
May 31 12:28:09 www afpd[3643]: shutting down on signal 15
May 31 12:28:09 www atalk: afpd shutdown succeeded

Thanks.

Title: Help with Log Reading!
Post by: Brave Dave on June 01, 2006, 11:09:09 AM

It looks orderly

If a keyboard is attached ctrl-alt-delete would do it as would straight reboot from the admin menu