do u know some application id that create admin id

Linux and Unix-Like Linux
1

Hi All,

I got this problem with my var logs, it got failed login as admin because it doesn't exist every 15 minutes and everyday.

Do you know some applications that try to create an application id as "admin"?

The problem is that this is a test server, so lots of applications installed and also been left off.

Can't find any script or cron that try to login as admin.

Thanks for any comment you may add.

2

Hi All,

I got this /var/log/messages and I would like to know where this came from

messages:Feb  3 16:30:10 localhost PAM-Wheel[862]: unknown user admin
messages:Feb  3 16:30:12 localhost pam_tally[865]: pam_tally: pam_get_uid; no such user admin
messages:Feb  3 16:30:12 localhost PAM-Wheel[865]: unknown user admin
messages:Feb  3 16:45:01 localhost pam_tally[3967]: pam_tally: pam_get_uid; no such user admin
messages:Feb  3 16:45:01 localhost PAM-Wheel[3967]: unknown user admin

Is this from the internal os application or is it from other server application? It's happening every 5 or 15 min.

Thanks for any comment you may add.

3

What do you mean by 'internal OS application'?

It may be some script making a failed sudo call. Check all cron tables for a script called every 15 minutes. It doesn't look like it's coming from the external network...