Re: [Logwatch] **Unmatched Entries**
Tom Metro <[email protected]>
| Newsgroups | gmane.comp.log.logwatch.devel |
|---|---|
| Message-ID | <[email protected]> |
Mike Tremaine wrote: > Michał Panasiewicz wrote: >> **Unmatched Entries** >> >> useradd: account already exists - account=mirekkkk, by=0: 1 Time(s) >> >> useradd: new account added - account=mirekkkk, uid=1026, gid=1000, >> home=/home/services/samba/mirekkkk, shell=/bin/false, by=0: 1 Time(s) >> >> useradd: running USERADD_CMD command - >> script=/etc/pwdutils/useradd.local, account=mirekpol, uid=1026, >> gid=1000, home=/home/services/samba/mirekkkk, by=0: 1 Time(s) > > useradd account already exists - Ignore it or make a new hash entry to > count these? What are the expected scenarios under which such an error message occurs? 1. User is manually entering commands and receives this warning. In this case, notification via the log is not important as they've supposedly already seen the warning. 2. Automated installer script calls useradd and triggers this warning. In most cases, it should be a harmless warning as the script will be attempting to create a user with identical properties to the one already created. The problem comes about with scenario #2 when the properties don't match. In that case you would want to be notified, though ideally only if the existing account didn't have the same properties. It doesn't look like the log line contains adequate information to make that determination. (The sample lines above are a bit confusing. I presume they aren't in chronological order, as the first shows the warning of a duplicate, while the second seems to be reporting the successful creation of an account with the same name. (The third appears to be some sort of debug message.)) In any case, this should be an infrequent enough error that letting it pass through to the report shouldn't bother anyone. > shadow - Never seen these before... Me neither. -Tom -- Tom Metro Venture Logic, Newton, MA, USA "Enterprise solutions through open source." Professional Profile: http://tmetro.venturelogic.com/ _______________________________________________ Logwatch-Devel mailing list [email protected] http://www2.list.logwatch.org:81/mailman/listinfo/logwatch-devel