Re: [Logwatch] **Unmatched Entries**

Michał Panasiewicz wrote:
> 
>  --------------------- Connections (secure-log) Begin  
> 
>  
>  **Unmatched Entries**
> 
> useradd: account already exists - account=mirekkkk, by=0: 1 Time(s)
>     useradd: new account added - account=mirekkkk, uid=1026, gid=1000,
> home=/home/services/samba/mirekkkk, shell=/bin/false, by=0: 1 Time(s)
>     useradd: running USERADD_CMD command -
> script=/etc/pwdutils/useradd.local, account=mirekpol, uid=1026,
> gid=1000, home=/home/services/samba/mirekkkk, by=0: 1 Time(s)
> 
> shadow: account deleted - account=logeck, uid=133, by=0: 1 Time(s)
>     shadow: account removed from group - account=logcheck, group=logs,
> gid=124, by=0: 1 Time(s)
>     shadow: group deleted - group=logeck, gid=133, by=0: 1 Time(s)
>     shadow: running USERDEL_POSTCMD command -
> script=/etc/pwdutils/userdel-post.local, account=logeck, uid=133,
> gid=173, home=/var/lib/logcheck, by=0: 1 Time(s)
>     shadow: running USERDEL_PRECMD command -
> script=/etc/pwdutils/userdel-pre.local, account=logeck, uid=133,
> gid=173, home=/var/lib/logcheck, by=0: 1 Time(s)
> 

Anyone have an opinion about these?

useradd account already exists - Ignore it or make a new hash entry to 
count these?

shadow - Never seen these before anyone know what distro this is from?


-Mike