Ano-Tech Computers
Enter keyword:

(su) session opened for user news by (uid=0)
Problem:
Messages like these appear in the system log: "Feb 15 01:01:00 savuud PAM_pwdb[1402]: (su) session opened for user news by (uid=0)" "Feb 15 01:01:01 savuud PAM_pwdb[1402]: (su) session closed for user news" A user called "news" exists in the password file, but you can't remember creating it.
 
Solution:
The "news" user belongs to the "inn" package, Internet News...something. The messages appear because logrotate is restarting "inn" every night.

You can make the messages disappear is to remove the file "inn" from under "/etc/syslog.d/". Or simply remove the package if you're not using it.
 
Discuss this solution
Did this article solve your problem? Yes No Did not apply

We welcome anyone who is willing to contribute to this public knowledge base, contact siteadmin@atc.no if you have information you would like to share. The idea is not to replace the commercial support sites, but to publish those hard-to-find solutions you've found yourself looking for over and over again.

Show all articles