Passwd file question

I reverted my fix, which entails that I removed my login from the passwd file and shadow file located in /etc. I have a login associated with an LDAP account that was added through the WebUI. It has SSH login enabled. When I login with SSH the following errors appear in /var/log/secure

Oct  8 21:21:49 proteus sshd[663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser=  user=james
Oct  8 21:21:50 proteus sshd[663]: pam_unix(sshd:session): session opened for user james by (uid=0)

My question is, should these pam errors appear in /var/log/secure? Is that normal?

Yes, don’t worry: these are standard log messages.

1 Like