0006825: Kali has joined the domain on Windows Server 2019 but no domain users can login.

ID	Project	Category	View Status	Date Submitted	Last Update

0006825	Kali Linux	General Bug	public	2020-11-05 21:14	2021-09-14 20:07

Reporter	kenali	Assigned To
Priority	normal	Severity	minor	Reproducibility	always
Status	closed	Resolution	no change required
Product Version	2020.3

Summary	0006825: Kali has joined the domain on Windows Server 2019 but no domain users can login.
Description	Kali has joined the domain on Windows Server 2019 but no domain users can log in per this error, "Sorry, that didn't work. Please try again." Steps were taken to join Kali: Authenticate Kali Linux against Active Directory Linux: Install client packages kenali@root:~$ cat /etc/*release kenali@root:~$ apt list --installed kenali@root:~$ sudo apt update kenali@root:~$ sudo apt upgrade kenali@root:~$ sudo apt install adcli sssd sssd-ad realmd policykit-1 oddjob oddjob-mkhomedir samba-common-tools krb5-workstation winbind samba libnss-winbind libnss-ldap ldap-utils libpam-winbind Linux: Joining the Windows domain kenali@root:~$ sudo realm join -v –U administrator [192.168.1.XXX or domain.com] --install=/ Linux: Confirm domain (realm) joined successfully kenali@root:~$ sudo realm list
Steps To Reproduce	After completing what's annotated under description, restart Kali machine on Virtual Box while Windows Server 2019 is running for client-server connection and try to log in onto Kali and see if you get the error, "Sorry, that didn't work. Please try again."

dQw4w9WgXcQ 2020-11-05 23:32 reporter ~0013649	Have you checked the log files to anything useful might show up?

dQw4w9WgXcQ 2020-11-05 23:34 reporter ~0013650	Have you checked the log files to see if anything useful might show up?

kenali 2020-11-06 00:23 reporter ~0013651	log files you do mean from Windows Server 2019 or from Kali Linux... last time I checked only the error message from the login screen as stated above, "Sorry, that didn't work. Please try again."... Windows Server 2019 Events are as follows: A. WINSERVER2019 10010 Error Microsoft-Windows-DistributedCOM System 11/5/2020 6:59:35 B. WINSERVER2019 7009 Error Microsoft-Windows-Service Control Manager System 11/5/2020 6:56:04 C. WINSERVER2019 10020 Warning Microsoft-Windows-DHCP-Server System 11/5/2020 6:55:58 PM D. WINSERVER2019 10154 Warning Microsoft-Windows-Windows Remote Management System 11/5/2019 6:55:51 PM E. WINSERVER2019 12 Warning Microsoft-Windows-Time-Service System 11/5/2020 6:55:58 PM F. WINSERVER2019 8193 Error VSS Application 11/5/2020 6:55:36 PM G. WINSERVER2019 1014 Warning Microsoft-Windows-DNS Client Events System 11/5/2020 6:55:30 PM

kenali 2020-11-06 00:46 reporter ~0013652	I don't know how any of the following errors below from /var/log/auth.log that contain system authorization events relate to Windows Server 2019 domain users that cannot login onto Kali Linux: Nov 1 13:38:27 root sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 1 13:38:42 root sudo: pam_unix(sudo:session): session closed for user root Nov 1 13:39:01 root CRON[1522]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 13:39:01 root CRON[1522]: pam_unix(cron:session): session closed for user root Nov 1 13:40:22 root sudo: kenali : TTY=pts/0 ; PWD=/home/kenali ; USER=root ; COMMAND=/usr/bin/nano /etc/resolve.conf Nov 1 13:40:22 root sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 1 13:41:44 root sudo: pam_unix(sudo:session): session closed for user root Nov 1 13:41:59 root sudo: kenali : TTY=pts/0 ; PWD=/home/kenali ; USER=root ; COMMAND=/usr/bin/nano /etc/resolve.conf Nov 1 13:41:59 root sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 1 13:42:17 root sudo: pam_unix(sudo:session): session closed for user root Nov 1 13:42:25 root sudo: kenali : TTY=pts/0 ; PWD=/home/kenali ; USER=root ; COMMAND=/usr/bin/nano /etc/resolve.conf Nov 1 13:42:25 root sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 1 13:42:59 root sudo: pam_unix(sudo:session): session closed for user root Nov 1 13:43:09 root sudo: kenali : TTY=pts/0 ; PWD=/home/kenali ; USER=root ; COMMAND=/usr/sbin/rdate -n thespicetechs.com Nov 1 13:43:09 root sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 1 13:43:24 root sudo: pam_unix(sudo:session): session closed for user root Nov 1 13:43:56 root sudo: kenali : TTY=pts/0 ; PWD=/home/kenali ; USER=root ; COMMAND=/usr/sbin/realm discover thespicetechs.com Nov 1 13:43:56 root sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 1 13:43:56 root realmd[1594]: Loaded settings from: /usr/lib/realmd/realmd-defaults.conf /usr/lib/realmd/realmd-distro.conf /etc/realmd.conf Nov 1 13:43:56 root realmd[1594]: holding daemon: startup Nov 1 13:43:56 root realmd[1594]: starting service Nov 1 13:43:56 root realmd[1594]: connected to bus Nov 1 13:43:56 root realmd[1594]: GLib-GIO: _g_io_module_get_default: Found default implementation local (GLocalVfs) for ‘gio-vfs’ Nov 1 13:43:56 root realmd[1594]: released daemon: startup Nov 1 13:43:56 root realmd[1594]: claimed name on bus: org.freedesktop.realmd Nov 1 13:43:56 root realmd[1594]: client using service: :1.52 Nov 1 13:43:56 root realmd[1594]: holding daemon: :1.52 Nov 1 13:43:56 root realmd[1594]: Using 'r693.1591' operation for method 'Discover' invocation on 'org.freedesktop.realmd.Provider' interface Nov 1 13:43:56 root realmd[1594]: Registered cancellable for operation 'r693.1591' Nov 1 13:43:56 root realmd[1594]: Resolving: _ldap._tcp.thespicetechs.com Nov 1 13:43:56 root realmd[1594]: Resolving: _ldap._tcp.thespicetechs.com Nov 1 13:43:56 root realmd[1594]: Resolving thespicetechs.com failed: No DNS record of the requested type for “_kerberos._udp.thespicetechs.com” Nov 1 13:43:56 root realmd[1594]: No DNS record of the requested type for “_ldap._tcp.thespicetechs.com” Nov 1 13:43:56 root realmd[1594]: Resolving: thespicetechs.com Nov 1 13:43:56 root realmd[1594]: Resolving: thespicetechs.com Nov 1 13:43:56 root realmd[1594]: Performing LDAP DSE lookup on: 92.242.140.21 Nov 1 13:43:56 root realmd[1594]: Performing LDAP DSE lookup on: 92.242.140.21 Nov 1 13:44:11 root realmd[1594]: ! Discovery timed out after 15 seconds Nov 1 13:44:11 root realmd[1594]: ! Discovery timed out after 15 seconds Nov 1 13:44:11 root realmd[1594]: client gone away: :1.52 Nov 1 13:44:11 root realmd[1594]: released daemon: :1.52 Nov 1 13:44:11 root sudo: pam_unix(sudo:session): session closed for user root Nov 1 13:44:36 root realmd[1594]: client using service: :1.54 Nov 1 13:44:37 root realmd[1594]: holding daemon: :1.54 Nov 1 13:44:37 root realmd[1594]: client gone away: :1.54 Nov 1 13:44:37 root realmd[1594]: released daemon: :1.54 Nov 1 13:45:01 root CRON[1608]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 13:45:01 root CRON[1608]: pam_unix(cron:session): session closed for user root Nov 1 13:45:37 root realmd[1594]: quitting realmd service after timeout Nov 1 13:45:37 root realmd[1594]: stopping service Nov 1 13:51:47 root systemd-logind[554]: System is powering down. Nov 1 13:51:48 root lightdm: pam_unix(lightdm:session): session closed for user kenali Nov 1 16:44:15 root systemd-logind[556]: New seat seat0. Nov 1 16:44:16 root systemd-logind[556]: Watching system buttons on /dev/input/event1 (Power Button) Nov 1 16:44:16 root systemd-logind[556]: Watching system buttons on /dev/input/event2 (Sleep Button) Nov 1 16:44:16 root systemd-logind[556]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Nov 1 16:44:24 root lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0) Nov 1 16:44:24 root systemd-logind[556]: New session c1 of user lightdm. Nov 1 16:44:24 root systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0) Nov 1 16:45:01 root CRON[1035]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 16:45:01 root CRON[1035]: pam_unix(cron:session): session closed for user root Nov 1 16:45:04 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 16:45:09 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 16:45:09 root lightdm: gkr-pam: unable to locate daemon control file Nov 1 16:45:09 root lightdm: gkr-pam: stashed password to try later in open session Nov 1 16:45:10 root lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm Nov 1 16:45:10 root lightdm: pam_unix(lightdm:session): session opened for user kenali by (uid=0) Nov 1 16:45:10 root systemd-logind[556]: Removed session c1. Nov 1 16:45:10 root systemd-logind[556]: New session 3 of user kenali. Nov 1 16:45:10 root systemd: pam_unix(systemd-user:session): session opened for user kenali by (uid=0) Nov 1 16:45:11 root lightdm: gkr-pam: gnome-keyring-daemon started properly and unlocked keyring Nov 1 16:45:20 root systemd: pam_unix(systemd-user:session): session closed for user lightdm Nov 1 16:45:35 root polkitd(authority=local): Registered Authentication Agent for unix-session:3 (system bus name :1.38 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale en_US.utf8) Nov 1 16:46:06 root realmd[1475]: Loaded settings from: /usr/lib/realmd/realmd-defaults.conf /usr/lib/realmd/realmd-distro.conf /etc/realmd.conf Nov 1 16:46:06 root realmd[1475]: holding daemon: startup Nov 1 16:46:06 root realmd[1475]: starting service Nov 1 16:46:06 root realmd[1475]: connected to bus Nov 1 16:46:06 root realmd[1475]: GLib-GIO: _g_io_module_get_default: Found default implementation local (GLocalVfs) for ‘gio-vfs’ Nov 1 16:46:06 root realmd[1475]: released daemon: startup Nov 1 16:46:06 root realmd[1475]: claimed name on bus: org.freedesktop.realmd Nov 1 16:46:06 root realmd[1475]: client using service: :1.49 Nov 1 16:46:06 root realmd[1475]: holding daemon: :1.49 Nov 1 16:46:06 root realmd[1475]: client gone away: :1.49 Nov 1 16:46:06 root realmd[1475]: released daemon: :1.49 Nov 1 16:46:16 root lightdm: pam_unix(lightdm:session): session closed for user kenali Nov 1 16:46:16 root systemd-logind[556]: Session 3 logged out. Waiting for processes to exit. Nov 1 16:46:17 root polkitd(authority=local): Unregistered Authentication Agent for unix-session:3 (system bus name :1.38, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale en_US.utf8) (disconnected from bus) Nov 1 16:46:17 root lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0) Nov 1 16:46:17 root systemd-logind[556]: New session c2 of user lightdm. Nov 1 16:46:18 root systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0) Nov 1 16:46:37 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 16:46:45 root lightdm: pam_unix(lightdm:auth): check pass; user unknown Nov 1 16:46:45 root lightdm: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= Nov 1 16:46:45 root lightdm: pam_sss(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= [email protected] Nov 1 16:46:45 root lightdm: pam_sss(lightdm:auth): received for user [email protected]: 10 (User not known to the underlying authentication module) Nov 1 16:46:48 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 16:46:57 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 16:47:04 root lightdm: pam_unix(lightdm:auth): check pass; user unknown Nov 1 16:47:04 root lightdm: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= Nov 1 16:47:04 root lightdm: pam_sss(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= [email protected] Nov 1 16:47:04 root lightdm: pam_sss(lightdm:auth): received for user [email protected]: 10 (User not known to the underlying authentication module) Nov 1 16:47:06 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 16:47:07 root realmd[1475]: quitting realmd service after timeout Nov 1 16:47:07 root realmd[1475]: stopping service Nov 1 16:47:27 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 16:47:32 root lightdm: pam_unix(lightdm:auth): check pass; user unknown Nov 1 16:47:32 root lightdm: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= Nov 1 16:47:32 root lightdm: pam_sss(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=NPower\Administrator Nov 1 16:47:32 root lightdm: pam_sss(lightdm:auth): received for user NPower\Administrator: 10 (User not known to the underlying authentication module) Nov 1 16:47:35 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 16:47:51 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 16:47:57 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 16:48:11 root lightdm: pam_unix(lightdm:auth): check pass; user unknown Nov 1 16:48:11 root lightdm: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= Nov 1 16:48:11 root lightdm: pam_sss(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=thespicetechs.com/Administrator Nov 1 16:48:11 root lightdm: pam_sss(lightdm:auth): received for user thespicetechs.com/Administrator: 10 (User not known to the underlying authentication module) Nov 1 16:48:13 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 16:48:30 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 16:48:37 root lightdm: pam_unix(lightdm:auth): check pass; user unknown Nov 1 16:48:37 root lightdm: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= Nov 1 16:48:37 root lightdm: pam_sss(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= [email protected] Nov 1 16:48:37 root lightdm: pam_sss(lightdm:auth): received for user [email protected]: 10 (User not known to the underlying authentication module) Nov 1 16:48:40 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 16:53:36 root lightdm: pam_unix(lightdm:auth): check pass; user unknown Nov 1 16:53:36 root lightdm: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= Nov 1 16:53:36 root lightdm: pam_sss(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= [email protected] Nov 1 16:53:36 root lightdm: pam_sss(lightdm:auth): received for user [email protected]: 10 (User not known to the underlying authentication module) Nov 1 16:53:38 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 16:55:01 root CRON[1600]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 16:55:01 root CRON[1600]: pam_unix(cron:session): session closed for user root Nov 1 17:05:01 root CRON[1642]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 17:05:01 root CRON[1642]: pam_unix(cron:session): session closed for user root Nov 1 17:05:41 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 17:05:45 root lightdm: pam_unix(lightdm:auth): check pass; user unknown Nov 1 17:05:45 root lightdm: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= Nov 1 17:05:45 root lightdm: pam_sss(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=thespicetechs.com\kfrancois Nov 1 17:05:45 root lightdm: pam_sss(lightdm:auth): received for user thespicetechs.com\kfrancois: 10 (User not known to the underlying authentication module) Nov 1 17:05:48 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 17:06:38 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 17:06:45 root lightdm: pam_unix(lightdm:auth): check pass; user unknown Nov 1 17:06:45 root lightdm: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= Nov 1 17:06:45 root lightdm: pam_sss(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=thespicetechs.com\kfrancois Nov 1 17:06:45 root lightdm: pam_sss(lightdm:auth): received for user thespicetechs.com\kfrancois: 10 (User not known to the underlying authentication module) Nov 1 17:06:47 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 17:06:57 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 17:07:02 root lightdm: pam_unix(lightdm:auth): check pass; user unknown Nov 1 17:07:02 root lightdm: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= Nov 1 17:07:04 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 17:07:15 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 17:07:20 root lightdm: pam_unix(lightdm:auth): check pass; user unknown Nov 1 17:07:20 root lightdm: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= Nov 1 17:07:20 root lightdm: pam_sss(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=THESPICETECHS.COM\kfrancois Nov 1 17:07:20 root lightdm: pam_sss(lightdm:auth): received for user THESPICETECHS.COM\kfrancois: 10 (User not known to the underlying authentication module) Nov 1 17:07:22 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 17:08:29 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 17:08:37 root lightdm: pam_unix(lightdm:auth): check pass; user unknown Nov 1 17:08:37 root lightdm: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= Nov 1 17:08:37 root lightdm: pam_sss(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=THESPICETECHS.COM\Administrator Nov 1 17:08:37 root lightdm: pam_sss(lightdm:auth): received for user THESPICETECHS.COM\Administrator: 10 (User not known to the underlying authentication module) Nov 1 17:08:39 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 1 17:09:01 root CRON[1674]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 17:09:01 root CRON[1674]: pam_unix(cron:session): session closed for user root Nov 1 17:15:01 root CRON[1737]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 17:15:01 root CRON[1737]: pam_unix(cron:session): session closed for user root Nov 1 17:17:01 root CRON[1751]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 17:17:01 root CRON[1751]: pam_unix(cron:session): session closed for user root Nov 1 17:25:01 root CRON[1777]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 17:25:01 root CRON[1777]: pam_unix(cron:session): session closed for user root Nov 1 17:35:01 root CRON[1819]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 17:35:01 root CRON[1819]: pam_unix(cron:session): session closed for user root Nov 1 17:39:01 root CRON[1837]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 17:39:01 root CRON[1837]: pam_unix(cron:session): session closed for user root Nov 1 17:45:01 root CRON[1900]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 17:45:02 root CRON[1900]: pam_unix(cron:session): session closed for user root Nov 1 17:55:01 root CRON[1942]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 17:55:01 root CRON[1942]: pam_unix(cron:session): session closed for user root Nov 1 18:05:01 root CRON[1978]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 18:05:01 root CRON[1978]: pam_unix(cron:session): session closed for user root Nov 1 18:09:01 root CRON[1997]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 18:09:01 root CRON[1997]: pam_unix(cron:session): session closed for user root Nov 1 18:15:01 root CRON[2064]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 18:15:01 root CRON[2064]: pam_unix(cron:session): session closed for user root Nov 1 18:17:01 root CRON[2073]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 18:17:01 root CRON[2073]: pam_unix(cron:session): session closed for user root Nov 1 18:25:01 root CRON[2105]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 18:25:01 root CRON[2105]: pam_unix(cron:session): session closed for user root Nov 1 18:35:01 root CRON[2142]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 18:35:01 root CRON[2142]: pam_unix(cron:session): session closed for user root Nov 1 18:39:01 root CRON[2160]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 18:39:01 root CRON[2160]: pam_unix(cron:session): session closed for user root Nov 1 18:45:01 root CRON[2227]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 18:45:01 root CRON[2227]: pam_unix(cron:session): session closed for user root Nov 1 18:55:01 root CRON[2265]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 18:55:01 root CRON[2265]: pam_unix(cron:session): session closed for user root Nov 1 19:05:01 root CRON[2302]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 19:05:01 root CRON[2302]: pam_unix(cron:session): session closed for user root Nov 1 19:09:01 root CRON[2319]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 19:09:01 root CRON[2319]: pam_unix(cron:session): session closed for user root Nov 1 19:15:01 root CRON[2386]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 19:15:01 root CRON[2386]: pam_unix(cron:session): session closed for user root Nov 1 19:17:01 root CRON[2396]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 19:17:01 root CRON[2396]: pam_unix(cron:session): session closed for user root Nov 1 19:25:01 root CRON[2426]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 19:25:01 root CRON[2426]: pam_unix(cron:session): session closed for user root Nov 1 19:35:01 root CRON[2465]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 19:35:01 root CRON[2465]: pam_unix(cron:session): session closed for user root Nov 1 19:39:01 root CRON[2482]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 19:39:01 root CRON[2482]: pam_unix(cron:session): session closed for user root Nov 1 19:45:01 root CRON[2547]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 19:45:01 root CRON[2547]: pam_unix(cron:session): session closed for user root Nov 1 19:55:01 root CRON[2587]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 19:55:01 root CRON[2587]: pam_unix(cron:session): session closed for user root Nov 1 20:05:01 root CRON[2625]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 20:05:01 root CRON[2625]: pam_unix(cron:session): session closed for user root Nov 1 20:09:01 root CRON[2642]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 20:09:01 root CRON[2642]: pam_unix(cron:session): session closed for user root Nov 1 20:15:01 root CRON[2710]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 20:15:01 root CRON[2710]: pam_unix(cron:session): session closed for user root Nov 1 20:17:01 root CRON[2719]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 20:17:01 root CRON[2719]: pam_unix(cron:session): session closed for user root Nov 1 20:25:01 root CRON[2750]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 20:25:01 root CRON[2750]: pam_unix(cron:session): session closed for user root Nov 1 20:35:01 root CRON[2792]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 20:35:01 root CRON[2792]: pam_unix(cron:session): session closed for user root Nov 1 20:39:01 root CRON[2810]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 20:39:01 root CRON[2810]: pam_unix(cron:session): session closed for user root Nov 1 20:45:01 root CRON[2877]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 20:45:01 root CRON[2877]: pam_unix(cron:session): session closed for user root Nov 1 20:55:01 root CRON[2915]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 20:55:01 root CRON[2915]: pam_unix(cron:session): session closed for user root Nov 1 21:05:01 root CRON[2956]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 21:05:01 root CRON[2956]: pam_unix(cron:session): session closed for user root Nov 1 21:09:01 root CRON[2971]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 21:09:01 root CRON[2971]: pam_unix(cron:session): session closed for user root Nov 1 21:15:01 root CRON[3038]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 21:15:01 root CRON[3038]: pam_unix(cron:session): session closed for user root Nov 1 21:17:01 root CRON[3046]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 21:17:01 root CRON[3046]: pam_unix(cron:session): session closed for user root Nov 1 21:25:01 root CRON[3078]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 21:25:02 root CRON[3078]: pam_unix(cron:session): session closed for user root Nov 1 21:35:01 root CRON[3118]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 21:35:01 root CRON[3118]: pam_unix(cron:session): session closed for user root Nov 1 21:39:01 root CRON[3136]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 21:39:01 root CRON[3136]: pam_unix(cron:session): session closed for user root Nov 1 21:45:02 root CRON[3203]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 21:45:02 root CRON[3203]: pam_unix(cron:session): session closed for user root Nov 1 21:55:01 root CRON[3245]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 21:55:01 root CRON[3245]: pam_unix(cron:session): session closed for user root Nov 1 22:05:01 root CRON[3287]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 22:05:01 root CRON[3287]: pam_unix(cron:session): session closed for user root Nov 1 22:09:01 root CRON[3305]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 22:09:01 root CRON[3305]: pam_unix(cron:session): session closed for user root Nov 1 22:15:01 root CRON[3368]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 22:15:01 root CRON[3368]: pam_unix(cron:session): session closed for user root Nov 1 22:17:01 root CRON[3382]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 22:17:01 root CRON[3382]: pam_unix(cron:session): session closed for user root Nov 1 22:25:01 root CRON[3413]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 22:25:01 root CRON[3413]: pam_unix(cron:session): session closed for user root Nov 1 22:35:01 root CRON[3449]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 22:35:01 root CRON[3449]: pam_unix(cron:session): session closed for user root Nov 1 22:39:01 root CRON[3468]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 22:39:01 root CRON[3468]: pam_unix(cron:session): session closed for user root Nov 1 22:45:01 root CRON[3535]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 22:45:01 root CRON[3535]: pam_unix(cron:session): session closed for user root Nov 1 22:55:01 root CRON[3573]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 22:55:01 root CRON[3573]: pam_unix(cron:session): session closed for user root Nov 1 23:05:01 root CRON[3610]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 23:05:01 root CRON[3610]: pam_unix(cron:session): session closed for user root Nov 1 23:09:01 root CRON[3629]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 23:09:01 root CRON[3629]: pam_unix(cron:session): session closed for user root Nov 1 23:15:01 root CRON[3696]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 23:15:01 root CRON[3696]: pam_unix(cron:session): session closed for user root Nov 1 23:17:01 root CRON[3704]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 23:17:01 root CRON[3704]: pam_unix(cron:session): session closed for user root Nov 1 23:25:01 root CRON[3737]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 23:25:01 root CRON[3737]: pam_unix(cron:session): session closed for user root Nov 1 23:35:01 root CRON[3778]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 23:35:01 root CRON[3778]: pam_unix(cron:session): session closed for user root Nov 1 23:39:01 root CRON[3795]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 23:39:01 root CRON[3795]: pam_unix(cron:session): session closed for user root Nov 1 23:45:01 root CRON[3859]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 23:45:01 root CRON[3859]: pam_unix(cron:session): session closed for user root Nov 1 23:55:01 root CRON[3899]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 23:55:01 root CRON[3899]: pam_unix(cron:session): session closed for user root Nov 1 23:59:01 root CRON[3916]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 1 23:59:01 root CRON[3916]: pam_unix(cron:session): session closed for user root Nov 2 00:05:01 root CRON[3953]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 00:05:01 root CRON[3953]: pam_unix(cron:session): session closed for user root Nov 2 00:09:01 root CRON[3974]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 00:09:01 root CRON[3974]: pam_unix(cron:session): session closed for user root Nov 2 00:15:01 root CRON[4040]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 00:15:01 root CRON[4040]: pam_unix(cron:session): session closed for user root Nov 2 00:17:01 root CRON[4050]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 00:17:01 root CRON[4050]: pam_unix(cron:session): session closed for user root Nov 2 00:25:01 root CRON[4081]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 00:25:01 root CRON[4081]: pam_unix(cron:session): session closed for user root Nov 2 00:35:01 root CRON[4118]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 00:35:01 root CRON[4118]: pam_unix(cron:session): session closed for user root Nov 2 00:39:01 root CRON[4137]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 00:39:01 root CRON[4137]: pam_unix(cron:session): session closed for user root Nov 2 00:45:01 root CRON[4204]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 00:45:01 root CRON[4204]: pam_unix(cron:session): session closed for user root Nov 2 00:55:01 root CRON[4242]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 00:55:01 root CRON[4242]: pam_unix(cron:session): session closed for user root Nov 2 01:05:01 root CRON[4282]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 01:05:01 root CRON[4282]: pam_unix(cron:session): session closed for user root Nov 2 01:09:01 root CRON[4301]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 01:09:01 root CRON[4301]: pam_unix(cron:session): session closed for user root Nov 2 01:15:01 root CRON[4368]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 01:15:01 root CRON[4368]: pam_unix(cron:session): session closed for user root Nov 2 01:17:01 root CRON[4377]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 01:17:01 root CRON[4377]: pam_unix(cron:session): session closed for user root Nov 2 01:25:01 root CRON[4408]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 01:25:01 root CRON[4408]: pam_unix(cron:session): session closed for user root Nov 2 01:35:01 root CRON[4450]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 01:35:01 root CRON[4450]: pam_unix(cron:session): session closed for user root Nov 2 01:39:01 root CRON[4468]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 01:39:01 root CRON[4468]: pam_unix(cron:session): session closed for user root Nov 2 01:45:02 root CRON[4587]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 01:45:02 root CRON[4587]: pam_unix(cron:session): session closed for user root Nov 2 01:55:01 root CRON[4625]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 01:55:01 root CRON[4625]: pam_unix(cron:session): session closed for user root Nov 2 02:05:01 root CRON[4663]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 02:05:01 root CRON[4663]: pam_unix(cron:session): session closed for user root Nov 2 02:09:01 root CRON[4683]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 02:09:01 root CRON[4683]: pam_unix(cron:session): session closed for user root Nov 2 02:15:01 root CRON[4747]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 02:15:01 root CRON[4747]: pam_unix(cron:session): session closed for user root Nov 2 02:17:01 root CRON[4760]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 02:17:01 root CRON[4760]: pam_unix(cron:session): session closed for user root Nov 2 02:25:01 root CRON[4788]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 02:25:01 root CRON[4788]: pam_unix(cron:session): session closed for user root Nov 2 02:35:01 root CRON[4828]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 02:35:01 root CRON[4828]: pam_unix(cron:session): session closed for user root Nov 2 02:39:01 root CRON[4847]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 02:39:01 root CRON[4847]: pam_unix(cron:session): session closed for user root Nov 2 02:45:01 root CRON[4911]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 02:45:01 root CRON[4911]: pam_unix(cron:session): session closed for user root Nov 2 02:55:01 root CRON[4952]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 02:55:01 root CRON[4952]: pam_unix(cron:session): session closed for user root Nov 2 03:05:01 root CRON[4988]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:05:01 root CRON[4988]: pam_unix(cron:session): session closed for user root Nov 2 03:09:01 root CRON[5007]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:09:01 root CRON[5007]: pam_unix(cron:session): session closed for user root Nov 2 03:10:01 root CRON[5055]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:10:01 root CRON[5055]: pam_unix(cron:session): session closed for user root Nov 2 03:15:01 root CRON[5076]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:15:01 root CRON[5076]: pam_unix(cron:session): session closed for user root Nov 2 03:17:01 root CRON[5088]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:17:01 root CRON[5088]: pam_unix(cron:session): session closed for user root Nov 2 03:25:01 root CRON[5116]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:25:01 root CRON[5116]: pam_unix(cron:session): session closed for user root Nov 2 03:35:01 root CRON[5158]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:35:01 root CRON[5158]: pam_unix(cron:session): session closed for user root Nov 2 03:39:01 root CRON[5177]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:39:01 root CRON[5177]: pam_unix(cron:session): session closed for user root Nov 2 03:45:01 root CRON[5244]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:45:01 root CRON[5244]: pam_unix(cron:session): session closed for user root Nov 2 03:55:01 root CRON[5282]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 03:55:01 root CRON[5282]: pam_unix(cron:session): session closed for user root Nov 2 04:05:01 root CRON[5323]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 04:05:01 root CRON[5323]: pam_unix(cron:session): session closed for user root Nov 2 04:09:01 root CRON[5338]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 04:09:01 root CRON[5338]: pam_unix(cron:session): session closed for user root Nov 2 04:15:01 root CRON[5401]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 04:15:01 root CRON[5401]: pam_unix(cron:session): session closed for user root Nov 2 04:17:01 root CRON[5413]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 04:17:01 root CRON[5413]: pam_unix(cron:session): session closed for user root Nov 2 04:25:01 root CRON[5444]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 04:25:01 root CRON[5444]: pam_unix(cron:session): session closed for user root Nov 2 04:35:01 root CRON[5482]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 04:35:01 root CRON[5482]: pam_unix(cron:session): session closed for user root Nov 2 04:39:01 root CRON[5500]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 04:39:01 root CRON[5500]: pam_unix(cron:session): session closed for user root Nov 2 04:45:01 root CRON[5576]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 04:45:01 root CRON[5576]: pam_unix(cron:session): session closed for user root Nov 2 04:55:01 root CRON[5613]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 04:55:01 root CRON[5613]: pam_unix(cron:session): session closed for user root Nov 2 05:05:01 root CRON[5655]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 05:05:01 root CRON[5655]: pam_unix(cron:session): session closed for user root Nov 2 05:09:01 root CRON[5671]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 05:09:01 root CRON[5671]: pam_unix(cron:session): session closed for user root Nov 2 05:15:01 root CRON[5736]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 05:15:01 root CRON[5736]: pam_unix(cron:session): session closed for user root Nov 2 05:17:01 root CRON[5747]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 05:17:01 root CRON[5747]: pam_unix(cron:session): session closed for user root Nov 2 05:25:01 root CRON[5775]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 05:25:01 root CRON[5775]: pam_unix(cron:session): session closed for user root Nov 2 05:35:01 root CRON[5817]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 05:35:01 root CRON[5817]: pam_unix(cron:session): session closed for user root Nov 2 05:39:01 root CRON[5836]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 05:39:01 root CRON[5836]: pam_unix(cron:session): session closed for user root Nov 2 05:45:02 root CRON[5903]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 05:45:02 root CRON[5903]: pam_unix(cron:session): session closed for user root Nov 2 05:55:01 root CRON[5940]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 05:55:01 root CRON[5940]: pam_unix(cron:session): session closed for user root Nov 2 06:05:01 root CRON[5978]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 06:05:01 root CRON[5978]: pam_unix(cron:session): session closed for user root Nov 2 06:09:01 root CRON[5997]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 06:09:01 root CRON[5997]: pam_unix(cron:session): session closed for user root Nov 2 06:15:01 root CRON[6065]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 06:15:01 root CRON[6065]: pam_unix(cron:session): session closed for user root Nov 2 06:17:01 root CRON[6073]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 06:17:01 root CRON[6073]: pam_unix(cron:session): session closed for user root Nov 2 06:25:01 root CRON[6159]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 06:25:01 root CRON[6158]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 06:25:01 root CRON[6159]: pam_unix(cron:session): session closed for user root Nov 2 06:25:37 root CRON[6158]: pam_unix(cron:session): session closed for user root Nov 2 06:35:01 root CRON[6283]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 06:35:01 root CRON[6283]: pam_unix(cron:session): session closed for user root Nov 2 06:39:01 root CRON[6300]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 06:39:01 root CRON[6300]: pam_unix(cron:session): session closed for user root Nov 2 06:45:01 root CRON[6367]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 06:45:01 root CRON[6367]: pam_unix(cron:session): session closed for user root Nov 2 06:55:01 root CRON[6405]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 06:55:01 root CRON[6405]: pam_unix(cron:session): session closed for user root Nov 2 07:05:01 root CRON[6450]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 07:05:01 root CRON[6450]: pam_unix(cron:session): session closed for user root Nov 2 07:09:01 root CRON[6465]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 07:09:01 root CRON[6465]: pam_unix(cron:session): session closed for user root Nov 2 07:15:01 root CRON[6532]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 07:15:01 root CRON[6532]: pam_unix(cron:session): session closed for user root Nov 2 07:17:01 root CRON[6541]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 07:17:01 root CRON[6541]: pam_unix(cron:session): session closed for user root Nov 2 07:25:01 root CRON[6572]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 07:25:01 root CRON[6572]: pam_unix(cron:session): session closed for user root Nov 2 07:35:01 root CRON[6611]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 07:35:01 root CRON[6611]: pam_unix(cron:session): session closed for user root Nov 2 07:39:01 root CRON[6628]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 07:39:01 root CRON[6628]: pam_unix(cron:session): session closed for user root Nov 2 07:45:01 root CRON[6694]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 07:45:01 root CRON[6694]: pam_unix(cron:session): session closed for user root Nov 2 07:55:01 root CRON[6732]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 07:55:01 root CRON[6732]: pam_unix(cron:session): session closed for user root Nov 2 08:05:01 root CRON[6770]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 08:05:01 root CRON[6770]: pam_unix(cron:session): session closed for user root Nov 2 08:09:01 root CRON[6788]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 08:09:01 root CRON[6788]: pam_unix(cron:session): session closed for user root Nov 2 08:15:01 root CRON[6855]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 08:15:01 root CRON[6855]: pam_unix(cron:session): session closed for user root Nov 2 08:17:01 root CRON[6864]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 08:17:02 root CRON[6864]: pam_unix(cron:session): session closed for user root Nov 2 08:25:01 root CRON[6895]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 08:25:01 root CRON[6895]: pam_unix(cron:session): session closed for user root Nov 2 08:35:01 root CRON[6933]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 08:35:01 root CRON[6933]: pam_unix(cron:session): session closed for user root Nov 2 08:39:01 root CRON[6952]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 08:39:01 root CRON[6952]: pam_unix(cron:session): session closed for user root Nov 2 08:45:01 root CRON[7018]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 08:45:01 root CRON[7018]: pam_unix(cron:session): session closed for user root Nov 2 08:55:01 root CRON[7055]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 08:55:01 root CRON[7055]: pam_unix(cron:session): session closed for user root Nov 2 09:05:01 root CRON[7097]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 09:05:01 root CRON[7097]: pam_unix(cron:session): session closed for user root Nov 2 09:09:01 root CRON[7113]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 09:09:01 root CRON[7113]: pam_unix(cron:session): session closed for user root Nov 2 09:12:44 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 2 09:12:52 root lightdm: pam_unix(lightdm:auth): check pass; user unknown Nov 2 09:12:52 root lightdm: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= Nov 2 09:12:55 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 2 09:13:17 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 2 09:13:23 root lightdm: pam_unix(lightdm:auth): check pass; user unknown Nov 2 09:13:23 root lightdm: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= Nov 2 09:13:23 root lightdm: pam_sss(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=thespicetechs.com\kfrancois Nov 2 09:13:23 root lightdm: pam_sss(lightdm:auth): received for user thespicetechs.com\kfrancois: 10 (User not known to the underlying authentication module) Nov 2 09:13:25 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 2 09:14:02 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 2 09:14:08 root lightdm: pam_unix(lightdm:auth): check pass; user unknown Nov 2 09:14:08 root lightdm: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= Nov 2 09:14:10 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 2 09:14:23 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 2 09:14:31 root lightdm: pam_unix(lightdm:auth): check pass; user unknown Nov 2 09:14:31 root lightdm: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= Nov 2 09:14:33 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 2 09:15:01 root CRON[7190]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 09:15:01 root CRON[7190]: pam_unix(cron:session): session closed for user root Nov 2 09:15:13 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 2 09:15:19 root lightdm: pam_unix(lightdm:auth): check pass; user unknown Nov 2 09:15:19 root lightdm: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= Nov 2 09:15:19 root lightdm: pam_sss(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=thespicetechs.com/kfrancois Nov 2 09:15:19 root lightdm: pam_sss(lightdm:auth): received for user thespicetechs.com/kfrancois: 10 (User not known to the underlying authentication module) Nov 2 09:15:21 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 2 09:15:33 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 2 09:15:37 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 2 09:15:37 root lightdm: gkr-pam: unable to locate daemon control file Nov 2 09:15:37 root lightdm: gkr-pam: stashed password to try later in open session Nov 2 09:15:38 root lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm Nov 2 09:15:38 root lightdm: pam_unix(lightdm:session): session opened for user kenali by (uid=0) Nov 2 09:15:38 root systemd-logind[556]: Removed session c2. Nov 2 09:15:38 root systemd-logind[556]: New session 157 of user kenali. Nov 2 09:15:38 root lightdm: gkr-pam: gnome-keyring-daemon started properly and unlocked keyring Nov 2 09:16:18 root polkitd(authority=local): Registered Authentication Agent for unix-session:157 (system bus name :1.79 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale en_US.utf8) Nov 2 09:17:01 root CRON[7539]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 2 09:17:01 root CRON[7539]: pam_unix(cron:session): session closed for user root Nov 2 09:19:34 root systemd-logind[556]: System is powering down. Nov 2 09:19:35 root lightdm: pam_unix(lightdm:session): session closed for user kenali Nov 2 09:19:35 root polkitd(authority=local): Unregistered Authentication Agent for unix-session:157 (system bus name :1.79, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale en_US.utf8) (disconnected from bus) Nov 3 18:00:10 root systemd-logind[601]: New seat seat0. Nov 3 18:00:10 root systemd-logind[601]: Watching system buttons on /dev/input/event1 (Power Button) Nov 3 18:00:10 root systemd-logind[601]: Watching system buttons on /dev/input/event2 (Sleep Button) Nov 3 18:00:10 root systemd-logind[601]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Nov 3 18:00:24 root lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0) Nov 3 18:00:25 root systemd-logind[601]: New session c1 of user lightdm. Nov 3 18:00:25 root systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0) Nov 3 18:02:37 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 3 18:02:43 root lightdm: pam_unix(lightdm:auth): check pass; user unknown Nov 3 18:02:43 root lightdm: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= Nov 3 18:02:43 root lightdm: pam_sss(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=thespicetechs.com\kfrancois Nov 3 18:02:43 root lightdm: pam_sss(lightdm:auth): received for user thespicetechs.com\kfrancois: 10 (User not known to the underlying authentication module) Nov 3 18:02:45 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 3 18:02:55 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 3 18:02:58 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 3 18:02:58 root lightdm: pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=kenali Nov 3 18:02:58 root lightdm: pam_sss(lightdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=kenali Nov 3 18:02:58 root lightdm: pam_sss(lightdm:auth): received for user kenali: 10 (User not known to the underlying authentication module) Nov 3 18:03:00 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 3 18:03:04 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 3 18:03:04 root lightdm: gkr-pam: unable to locate daemon control file Nov 3 18:03:04 root lightdm: gkr-pam: stashed password to try later in open session Nov 3 18:03:05 root lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm Nov 3 18:03:05 root lightdm: pam_unix(lightdm:session): session opened for user kenali by (uid=0) Nov 3 18:03:05 root systemd-logind[601]: Removed session c1. Nov 3 18:03:05 root systemd-logind[601]: New session 2 of user kenali. Nov 3 18:03:05 root systemd: pam_unix(systemd-user:session): session opened for user kenali by (uid=0) Nov 3 18:03:07 root lightdm: gkr-pam: gnome-keyring-daemon started properly and unlocked keyring Nov 3 18:03:16 root systemd: pam_unix(systemd-user:session): session closed for user lightdm Nov 3 18:03:42 root polkitd(authority=local): Registered Authentication Agent for unix-session:2 (system bus name :1.37 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale en_US.utf8) Nov 3 18:05:01 root CRON[1501]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 18:05:02 root CRON[1501]: pam_unix(cron:session): session closed for user root Nov 3 18:09:01 root CRON[1561]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 18:09:01 root CRON[1561]: pam_unix(cron:session): session closed for user root Nov 3 18:09:10 root gnome-keyring-daemon[1608]: couldn't access control socket: /run/user/1000/keyring/control: No such file or directory Nov 3 18:09:22 root realmd[1624]: Loaded settings from: /usr/lib/realmd/realmd-defaults.conf /usr/lib/realmd/realmd-distro.conf /etc/realmd.conf Nov 3 18:09:22 root realmd[1624]: holding daemon: startup Nov 3 18:09:22 root realmd[1624]: starting service Nov 3 18:09:22 root realmd[1624]: connected to bus Nov 3 18:09:22 root realmd[1624]: GLib-GIO: _g_io_module_get_default: Found default implementation local (GLocalVfs) for ‘gio-vfs’ Nov 3 18:09:22 root realmd[1624]: released daemon: startup Nov 3 18:09:22 root realmd[1624]: claimed name on bus: org.freedesktop.realmd Nov 3 18:09:22 root realmd[1624]: client using service: :1.53 Nov 3 18:09:22 root realmd[1624]: holding daemon: :1.53 Nov 3 18:09:22 root realmd[1624]: client gone away: :1.53 Nov 3 18:09:22 root realmd[1624]: released daemon: :1.53 Nov 3 18:10:23 root realmd[1624]: quitting realmd service after timeout Nov 3 18:10:23 root realmd[1624]: stopping service Nov 3 18:15:01 root CRON[1637]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 18:15:01 root CRON[1637]: pam_unix(cron:session): session closed for user root Nov 3 18:17:01 root CRON[1694]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 18:17:01 root CRON[1694]: pam_unix(cron:session): session closed for user root Nov 3 18:21:58 root realmd[1718]: Loaded settings from: /usr/lib/realmd/realmd-defaults.conf /usr/lib/realmd/realmd-distro.conf /etc/realmd.conf Nov 3 18:21:58 root realmd[1718]: holding daemon: startup Nov 3 18:21:58 root realmd[1718]: starting service Nov 3 18:21:58 root realmd[1718]: connected to bus Nov 3 18:21:58 root realmd[1718]: GLib-GIO: _g_io_module_get_default: Found default implementation local (GLocalVfs) for ‘gio-vfs’ Nov 3 18:21:58 root realmd[1718]: released daemon: startup Nov 3 18:21:58 root realmd[1718]: claimed name on bus: org.freedesktop.realmd Nov 3 18:21:58 root realmd[1718]: client using service: :1.56 Nov 3 18:21:58 root realmd[1718]: holding daemon: :1.56 Nov 3 18:21:58 root realmd[1718]: Using 'r1383.1715' operation for method 'ChangeLoginPolicy' invocation on 'org.freedesktop.realmd.Realm' interface Nov 3 18:21:58 root realmd[1718]: Registered cancellable for operation 'r1383.1715' Nov 3 18:22:15 root polkitd(authority=local): Operator of unix-session:2 successfully authenticated as unix-user:kenali to gain TEMPORARY authorization for action org.freedesktop.realmd.login-policy for system-bus-name::1.56 [realm permit -R thespicetechs.com kfrancois] (owned by unix-user:kenali) Nov 3 18:22:15 root realmd[1718]: holding daemon: current-invocation Nov 3 18:22:15 root realmd[1718]: ! Invalid login argument 'kfrancois' does not match the login format. Nov 3 18:22:15 root realmd[1718]: ! Invalid login argument 'kfrancois' does not match the login format. Nov 3 18:22:15 root realmd[1718]: released daemon: current-invocation Nov 3 18:22:15 root realmd[1718]: client gone away: :1.56 Nov 3 18:22:15 root realmd[1718]: released daemon: :1.56 Nov 3 18:23:16 root realmd[1718]: quitting realmd service after timeout Nov 3 18:23:16 root realmd[1718]: stopping service Nov 3 18:25:01 root CRON[1737]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 18:25:01 root CRON[1737]: pam_unix(cron:session): session closed for user root Nov 3 18:26:00 root realmd[1747]: Loaded settings from: /usr/lib/realmd/realmd-defaults.conf /usr/lib/realmd/realmd-distro.conf /etc/realmd.conf Nov 3 18:26:00 root realmd[1747]: holding daemon: startup Nov 3 18:26:00 root realmd[1747]: starting service Nov 3 18:26:00 root realmd[1747]: connected to bus Nov 3 18:26:00 root realmd[1747]: GLib-GIO: _g_io_module_get_default: Found default implementation local (GLocalVfs) for ‘gio-vfs’ Nov 3 18:26:00 root realmd[1747]: released daemon: startup Nov 3 18:26:00 root realmd[1747]: claimed name on bus: org.freedesktop.realmd Nov 3 18:26:00 root realmd[1747]: client using service: :1.59 Nov 3 18:26:00 root realmd[1747]: holding daemon: :1.59 Nov 3 18:26:00 root realmd[1747]: client gone away: :1.59 Nov 3 18:26:00 root realmd[1747]: released daemon: :1.59 Nov 3 18:26:11 root realmd[1747]: client using service: :1.61 Nov 3 18:26:11 root realmd[1747]: holding daemon: :1.61 Nov 3 18:26:11 root realmd[1747]: client gone away: :1.61 Nov 3 18:26:11 root realmd[1747]: released daemon: :1.61 Nov 3 18:26:22 root realmd[1747]: client using service: :1.62 Nov 3 18:26:22 root realmd[1747]: holding daemon: :1.62 Nov 3 18:26:22 root realmd[1747]: client gone away: :1.62 Nov 3 18:26:22 root realmd[1747]: released daemon: :1.62 Nov 3 18:26:39 root realmd[1747]: client using service: :1.63 Nov 3 18:26:39 root realmd[1747]: holding daemon: :1.63 Nov 3 18:26:39 root realmd[1747]: Using 'r1664.1758' operation for method 'ChangeLoginPolicy' invocation on 'org.freedesktop.realmd.Realm' interface Nov 3 18:26:39 root realmd[1747]: Registered cancellable for operation 'r1664.1758' Nov 3 18:26:50 root polkit-agent-helper-1[1763]: pam_unix(polkit-1:auth): authentication failure; logname= uid=1000 euid=0 tty= ruser=kenali rhost= user=kenali Nov 3 18:26:50 root polkit-agent-helper-1[1763]: pam_sss(polkit-1:auth): authentication failure; logname= uid=1000 euid=0 tty= ruser=kenali rhost= user=kenali Nov 3 18:26:50 root polkit-agent-helper-1[1763]: pam_sss(polkit-1:auth): received for user kenali: 10 (User not known to the underlying authentication module) Nov 3 18:26:58 root polkitd(authority=local): Operator of unix-session:2 FAILED to authenticate to gain authorization for action org.freedesktop.realmd.login-policy for system-bus-name::1.63 [realm permit -R thespicetechs.com administrator] (owned by unix-user:kenali) Nov 3 18:26:58 root realmd[1747]: rejecting access to method 'ChangeLoginPolicy' on interface 'org.freedesktop.realmd.Realm' at /org/freedesktop/realmd/Sssd/thespicetechs_com_1 Nov 3 18:26:58 root realmd[1747]: client gone away: :1.63 Nov 3 18:26:58 root realmd[1747]: released daemon: :1.63 Nov 3 18:27:04 root realmd[1747]: client using service: :1.64 Nov 3 18:27:04 root realmd[1747]: holding daemon: :1.64 Nov 3 18:27:04 root realmd[1747]: Using 'r1689.1770' operation for method 'ChangeLoginPolicy' invocation on 'org.freedesktop.realmd.Realm' interface Nov 3 18:27:04 root realmd[1747]: Registered cancellable for operation 'r1689.1770' Nov 3 18:27:13 root polkitd(authority=local): Operator of unix-session:2 successfully authenticated as unix-user:kenali to gain TEMPORARY authorization for action org.freedesktop.realmd.login-policy for system-bus-name::1.64 [realm permit -R thespicetechs.com kfrancois] (owned by unix-user:kenali) Nov 3 18:27:13 root realmd[1747]: holding daemon: current-invocation Nov 3 18:27:13 root realmd[1747]: ! Invalid login argument 'kfrancois' does not match the login format. Nov 3 18:27:13 root realmd[1747]: ! Invalid login argument 'kfrancois' does not match the login format. Nov 3 18:27:13 root realmd[1747]: released daemon: current-invocation Nov 3 18:27:13 root realmd[1747]: client gone away: :1.64 Nov 3 18:27:13 root realmd[1747]: released daemon: :1.64 Nov 3 18:28:14 root realmd[1747]: quitting realmd service after timeout Nov 3 18:28:14 root realmd[1747]: stopping service Nov 3 18:35:01 root CRON[1860]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 18:35:01 root CRON[1860]: pam_unix(cron:session): session closed for user root Nov 3 18:38:36 root lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0) Nov 3 18:38:36 root systemd-logind[601]: New session c2 of user lightdm. Nov 3 18:38:37 root systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0) Nov 3 18:39:03 root CRON[1949]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 18:39:03 root CRON[1949]: pam_unix(cron:session): session closed for user root Nov 3 18:45:01 root CRON[2017]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 18:45:01 root CRON[2017]: pam_unix(cron:session): session closed for user root Nov 3 18:55:01 root CRON[2055]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 18:55:01 root CRON[2055]: pam_unix(cron:session): session closed for user root Nov 3 19:02:25 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 3 19:02:32 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 3 19:02:32 root lightdm: gkr-pam: unable to locate daemon control file Nov 3 19:02:32 root lightdm: gkr-pam: stashed password to try later in open session Nov 3 19:02:34 root lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm Nov 3 19:02:34 root systemd-logind[601]: Removed session c2. Nov 3 19:03:05 root systemd-logind[601]: System is powering down. Nov 3 19:03:06 root polkitd(authority=local): Unregistered Authentication Agent for unix-session:2 (system bus name :1.37, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale en_US.utf8) (disconnected from bus) Nov 3 19:19:00 root systemd-logind[569]: New seat seat0. Nov 3 19:19:01 root systemd-logind[569]: Watching system buttons on /dev/input/event1 (Power Button) Nov 3 19:19:01 root systemd-logind[569]: Watching system buttons on /dev/input/event2 (Sleep Button) Nov 3 19:19:01 root systemd-logind[569]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Nov 3 19:19:17 root lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0) Nov 3 19:19:17 root systemd-logind[569]: New session c1 of user lightdm. Nov 3 19:19:17 root systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0) Nov 3 19:20:31 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 3 19:20:38 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 3 19:20:42 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 3 19:20:42 root lightdm: gkr-pam: unable to locate daemon control file Nov 3 19:20:42 root lightdm: gkr-pam: stashed password to try later in open session Nov 3 19:20:42 root lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm Nov 3 19:20:42 root lightdm: pam_unix(lightdm:session): session opened for user kenali by (uid=0) Nov 3 19:20:42 root systemd-logind[569]: Removed session c1. Nov 3 19:20:42 root systemd-logind[569]: New session 2 of user kenali. Nov 3 19:20:42 root systemd: pam_unix(systemd-user:session): session opened for user kenali by (uid=0) Nov 3 19:20:44 root lightdm: gkr-pam: gnome-keyring-daemon started properly and unlocked keyring Nov 3 19:20:53 root systemd: pam_unix(systemd-user:session): session closed for user lightdm Nov 3 19:21:16 root polkitd(authority=local): Registered Authentication Agent for unix-session:2 (system bus name :1.37 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale en_US.utf8) Nov 3 19:25:01 root CRON[1531]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 19:25:01 root CRON[1531]: pam_unix(cron:session): session closed for user root Nov 3 19:35:02 root CRON[1579]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 19:35:02 root CRON[1579]: pam_unix(cron:session): session closed for user root Nov 3 19:39:01 root CRON[1601]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 19:39:01 root CRON[1601]: pam_unix(cron:session): session closed for user root Nov 3 19:39:06 root sudo: pam_unix(sudo:auth): Couldn't open /etc/securetty: No such file or directory Nov 3 19:39:12 root sudo: pam_unix(sudo:auth): Couldn't open /etc/securetty: No such file or directory Nov 3 19:39:12 root sudo: kenali : TTY=pts/0 ; PWD=/home/kenali ; USER=root ; COMMAND=/usr/bin/apt update Nov 3 19:39:12 root sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 3 19:40:02 root sudo: pam_unix(sudo:session): session closed for user root Nov 3 19:45:01 root CRON[1784]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 19:45:01 root CRON[1784]: pam_unix(cron:session): session closed for user root Nov 3 19:45:13 root sudo: kenali : TTY=pts/0 ; PWD=/home/kenali ; USER=root ; COMMAND=/usr/bin/apt install whatweb Nov 3 19:45:13 root sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 3 19:45:16 root sudo: pam_unix(sudo:session): session closed for user root Nov 3 19:48:07 root sudo: kenali : TTY=pts/0 ; PWD=/home/kenali ; USER=root ; COMMAND=/usr/bin/apt install kali-linux-full Nov 3 19:48:07 root sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 3 19:48:09 root sudo: pam_unix(sudo:session): session closed for user root Nov 3 19:49:11 root sudo: kenali : TTY=pts/0 ; PWD=/home/kenali ; USER=root ; COMMAND=/usr/bin/apt kali-linux-full Nov 3 19:49:11 root sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 3 19:49:11 root sudo: pam_unix(sudo:session): session closed for user root Nov 3 19:55:01 root CRON[1836]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 19:55:01 root CRON[1836]: pam_unix(cron:session): session closed for user root Nov 3 19:55:57 root sudo: kenali : TTY=pts/0 ; PWD=/home/kenali ; USER=root ; COMMAND=/usr/bin/apt install kali-linux-default Nov 3 19:55:57 root sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 3 19:56:00 root sudo: pam_unix(sudo:session): session closed for user root Nov 3 20:05:01 root CRON[1879]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 20:05:01 root CRON[1879]: pam_unix(cron:session): session closed for user root Nov 3 20:09:01 root CRON[1896]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 20:09:01 root CRON[1896]: pam_unix(cron:session): session closed for user root Nov 3 20:15:01 root CRON[1963]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 20:15:01 root CRON[1963]: pam_unix(cron:session): session closed for user root Nov 3 20:17:01 root CRON[1972]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 20:17:02 root CRON[1972]: pam_unix(cron:session): session closed for user root Nov 3 20:18:34 root lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0) Nov 3 20:18:34 root systemd-logind[569]: New session c2 of user lightdm. Nov 3 20:18:34 root systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0) Nov 3 20:18:47 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 3 20:18:47 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 3 20:25:01 root CRON[2083]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 20:25:01 root CRON[2083]: pam_unix(cron:session): session closed for user root Nov 3 20:35:01 root CRON[2124]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 20:35:01 root CRON[2124]: pam_unix(cron:session): session closed for user root Nov 3 20:39:01 root CRON[2140]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 20:39:01 root CRON[2140]: pam_unix(cron:session): session closed for user root Nov 3 20:45:01 root CRON[2206]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 20:45:01 root CRON[2206]: pam_unix(cron:session): session closed for user root Nov 3 20:55:01 root CRON[2246]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 20:55:01 root CRON[2246]: pam_unix(cron:session): session closed for user root Nov 3 21:05:01 root CRON[2284]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 21:05:01 root CRON[2284]: pam_unix(cron:session): session closed for user root Nov 3 21:09:01 root CRON[2302]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 21:09:01 root CRON[2302]: pam_unix(cron:session): session closed for user root Nov 3 21:15:01 root CRON[2370]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 21:15:01 root CRON[2370]: pam_unix(cron:session): session closed for user root Nov 3 21:17:01 root CRON[2377]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 21:17:02 root CRON[2377]: pam_unix(cron:session): session closed for user root Nov 3 21:25:01 root CRON[2411]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 21:25:01 root CRON[2411]: pam_unix(cron:session): session closed for user root Nov 3 21:35:01 root CRON[2449]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 21:35:01 root CRON[2449]: pam_unix(cron:session): session closed for user root Nov 3 21:39:01 root CRON[2464]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 21:39:01 root CRON[2464]: pam_unix(cron:session): session closed for user root Nov 3 21:45:01 root CRON[2533]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 21:45:01 root CRON[2533]: pam_unix(cron:session): session closed for user root Nov 3 21:55:01 root CRON[2570]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 21:55:01 root CRON[2570]: pam_unix(cron:session): session closed for user root Nov 3 22:05:01 root CRON[2607]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 22:05:01 root CRON[2607]: pam_unix(cron:session): session closed for user root Nov 3 22:09:01 root CRON[2624]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 22:09:01 root CRON[2624]: pam_unix(cron:session): session closed for user root Nov 3 22:15:01 root CRON[2688]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 22:15:01 root CRON[2688]: pam_unix(cron:session): session closed for user root Nov 3 22:17:01 root CRON[2700]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 22:17:01 root CRON[2700]: pam_unix(cron:session): session closed for user root Nov 3 22:25:01 root CRON[2733]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 22:25:01 root CRON[2733]: pam_unix(cron:session): session closed for user root Nov 3 22:35:01 root CRON[2771]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 22:35:01 root CRON[2771]: pam_unix(cron:session): session closed for user root Nov 3 22:39:01 root CRON[2787]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 22:39:01 root CRON[2787]: pam_unix(cron:session): session closed for user root Nov 3 22:45:01 root CRON[2855]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 22:45:01 root CRON[2855]: pam_unix(cron:session): session closed for user root Nov 3 22:55:01 root CRON[2897]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 22:55:01 root CRON[2897]: pam_unix(cron:session): session closed for user root Nov 3 23:05:01 root CRON[2934]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 23:05:01 root CRON[2934]: pam_unix(cron:session): session closed for user root Nov 3 23:09:01 root CRON[2953]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 23:09:01 root CRON[2953]: pam_unix(cron:session): session closed for user root Nov 3 23:15:01 root CRON[3019]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 23:15:01 root CRON[3019]: pam_unix(cron:session): session closed for user root Nov 3 23:17:01 root CRON[3031]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 23:17:01 root CRON[3031]: pam_unix(cron:session): session closed for user root Nov 3 23:25:01 root CRON[3060]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 23:25:01 root CRON[3060]: pam_unix(cron:session): session closed for user root Nov 3 23:35:01 root CRON[3100]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 23:35:01 root CRON[3100]: pam_unix(cron:session): session closed for user root Nov 3 23:39:01 root CRON[3114]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 23:39:01 root CRON[3114]: pam_unix(cron:session): session closed for user root Nov 3 23:45:01 root CRON[3182]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 23:45:01 root CRON[3182]: pam_unix(cron:session): session closed for user root Nov 3 23:55:01 root CRON[3220]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 23:55:01 root CRON[3220]: pam_unix(cron:session): session closed for user root Nov 3 23:59:01 root CRON[3236]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 3 23:59:01 root CRON[3236]: pam_unix(cron:session): session closed for user root Nov 4 00:05:01 root CRON[3279]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 00:05:01 root CRON[3279]: pam_unix(cron:session): session closed for user root Nov 4 00:09:01 root CRON[3294]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 00:09:01 root CRON[3294]: pam_unix(cron:session): session closed for user root Nov 4 00:15:01 root CRON[3361]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 00:15:01 root CRON[3361]: pam_unix(cron:session): session closed for user root Nov 4 00:17:01 root CRON[3372]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 00:17:01 root CRON[3372]: pam_unix(cron:session): session closed for user root Nov 4 00:25:01 root CRON[3405]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 00:25:01 root CRON[3405]: pam_unix(cron:session): session closed for user root Nov 4 00:35:01 root CRON[3442]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 00:35:01 root CRON[3442]: pam_unix(cron:session): session closed for user root Nov 4 00:39:01 root CRON[3459]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 00:39:01 root CRON[3459]: pam_unix(cron:session): session closed for user root Nov 4 00:45:01 root CRON[3523]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 00:45:01 root CRON[3523]: pam_unix(cron:session): session closed for user root Nov 4 00:55:01 root CRON[3564]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 00:55:01 root CRON[3564]: pam_unix(cron:session): session closed for user root Nov 4 01:05:01 root CRON[3602]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 01:05:01 root CRON[3602]: pam_unix(cron:session): session closed for user root Nov 4 01:09:01 root CRON[3619]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 01:09:01 root CRON[3619]: pam_unix(cron:session): session closed for user root Nov 4 01:15:01 root CRON[3683]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 01:15:01 root CRON[3683]: pam_unix(cron:session): session closed for user root Nov 4 01:17:01 root CRON[3695]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 01:17:01 root CRON[3695]: pam_unix(cron:session): session closed for user root Nov 4 01:25:01 root CRON[3728]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 01:25:02 root CRON[3728]: pam_unix(cron:session): session closed for user root Nov 4 01:35:01 root CRON[3764]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 01:35:01 root CRON[3764]: pam_unix(cron:session): session closed for user root Nov 4 01:39:01 root CRON[3778]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 01:39:01 root CRON[3778]: pam_unix(cron:session): session closed for user root Nov 4 01:45:01 root CRON[3846]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 01:45:01 root CRON[3846]: pam_unix(cron:session): session closed for user root Nov 4 01:55:01 root CRON[3888]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 01:55:01 root CRON[3888]: pam_unix(cron:session): session closed for user root Nov 4 02:05:01 root CRON[3929]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 02:05:01 root CRON[3929]: pam_unix(cron:session): session closed for user root Nov 4 02:09:01 root CRON[3945]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 02:09:01 root CRON[3945]: pam_unix(cron:session): session closed for user root Nov 4 02:15:01 root CRON[4011]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 02:15:01 root CRON[4011]: pam_unix(cron:session): session closed for user root Nov 4 02:17:01 root CRON[4022]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 02:17:01 root CRON[4022]: pam_unix(cron:session): session closed for user root Nov 4 02:25:01 root CRON[4050]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 02:25:01 root CRON[4050]: pam_unix(cron:session): session closed for user root Nov 4 02:35:01 root CRON[4091]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 02:35:01 root CRON[4091]: pam_unix(cron:session): session closed for user root Nov 4 02:39:01 root CRON[4109]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 02:39:01 root CRON[4109]: pam_unix(cron:session): session closed for user root Nov 4 02:45:01 root CRON[4172]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 02:45:01 root CRON[4172]: pam_unix(cron:session): session closed for user root Nov 4 02:55:01 root CRON[4210]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 02:55:01 root CRON[4210]: pam_unix(cron:session): session closed for user root Nov 4 03:05:01 root CRON[4252]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 03:05:01 root CRON[4252]: pam_unix(cron:session): session closed for user root Nov 4 03:09:01 root CRON[4268]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 03:09:01 root CRON[4268]: pam_unix(cron:session): session closed for user root Nov 4 03:10:01 root CRON[4314]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 03:10:01 root CRON[4314]: pam_unix(cron:session): session closed for user root Nov 4 03:15:01 root CRON[4335]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 03:15:01 root CRON[4335]: pam_unix(cron:session): session closed for user root Nov 4 03:17:01 root CRON[4348]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 03:17:01 root CRON[4348]: pam_unix(cron:session): session closed for user root Nov 4 03:25:01 root CRON[4376]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 03:25:01 root CRON[4376]: pam_unix(cron:session): session closed for user root Nov 4 03:35:01 root CRON[4415]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 03:35:01 root CRON[4415]: pam_unix(cron:session): session closed for user root Nov 4 03:39:01 root CRON[4430]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 03:39:01 root CRON[4430]: pam_unix(cron:session): session closed for user root Nov 4 03:45:01 root CRON[4494]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 03:45:01 root CRON[4494]: pam_unix(cron:session): session closed for user root Nov 4 03:55:01 root CRON[4536]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 03:55:01 root CRON[4536]: pam_unix(cron:session): session closed for user root Nov 4 04:05:01 root CRON[4574]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 04:05:01 root CRON[4574]: pam_unix(cron:session): session closed for user root Nov 4 04:09:01 root CRON[4590]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 04:09:01 root CRON[4590]: pam_unix(cron:session): session closed for user root Nov 4 04:15:01 root CRON[4658]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 04:15:01 root CRON[4658]: pam_unix(cron:session): session closed for user root Nov 4 04:17:01 root CRON[4666]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 04:17:01 root CRON[4666]: pam_unix(cron:session): session closed for user root Nov 4 04:25:01 root CRON[4698]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 04:25:01 root CRON[4698]: pam_unix(cron:session): session closed for user root Nov 4 04:35:01 root CRON[4736]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 04:35:01 root CRON[4736]: pam_unix(cron:session): session closed for user root Nov 4 04:39:01 root CRON[4749]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 04:39:01 root CRON[4749]: pam_unix(cron:session): session closed for user root Nov 4 04:45:01 root CRON[4819]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 04:45:01 root CRON[4819]: pam_unix(cron:session): session closed for user root Nov 4 04:55:01 root CRON[4858]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 04:55:01 root CRON[4858]: pam_unix(cron:session): session closed for user root Nov 4 05:05:01 root CRON[4899]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 05:05:01 root CRON[4899]: pam_unix(cron:session): session closed for user root Nov 4 05:09:01 root CRON[4913]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 05:09:01 root CRON[4913]: pam_unix(cron:session): session closed for user root Nov 4 05:15:02 root CRON[4981]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 05:15:02 root CRON[4981]: pam_unix(cron:session): session closed for user root Nov 4 05:17:01 root CRON[4990]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 05:17:01 root CRON[4990]: pam_unix(cron:session): session closed for user root Nov 4 05:25:01 root CRON[5022]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 05:25:01 root CRON[5022]: pam_unix(cron:session): session closed for user root Nov 4 05:35:01 root CRON[5063]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 05:35:01 root CRON[5063]: pam_unix(cron:session): session closed for user root Nov 4 05:39:01 root CRON[5078]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 05:39:01 root CRON[5078]: pam_unix(cron:session): session closed for user root Nov 4 05:45:01 root CRON[5145]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 05:45:01 root CRON[5145]: pam_unix(cron:session): session closed for user root Nov 4 05:55:01 root CRON[5186]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 05:55:01 root CRON[5186]: pam_unix(cron:session): session closed for user root Nov 4 06:05:01 root CRON[5223]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 06:05:01 root CRON[5223]: pam_unix(cron:session): session closed for user root Nov 4 06:09:01 root CRON[5240]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 06:09:01 root CRON[5240]: pam_unix(cron:session): session closed for user root Nov 4 06:15:01 root CRON[5304]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 06:15:01 root CRON[5304]: pam_unix(cron:session): session closed for user root Nov 4 06:17:01 root CRON[5316]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 06:17:01 root CRON[5316]: pam_unix(cron:session): session closed for user root Nov 4 06:25:01 root CRON[5350]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 06:25:01 root CRON[5349]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 06:25:01 root CRON[5350]: pam_unix(cron:session): session closed for user root Nov 4 06:25:53 root CRON[5349]: pam_unix(cron:session): session closed for user root Nov 4 06:35:02 root CRON[5481]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 06:35:02 root CRON[5481]: pam_unix(cron:session): session closed for user root Nov 4 06:39:01 root CRON[5496]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 06:39:01 root CRON[5496]: pam_unix(cron:session): session closed for user root Nov 4 06:45:01 root CRON[5562]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 06:45:01 root CRON[5562]: pam_unix(cron:session): session closed for user root Nov 4 06:55:01 root CRON[5665]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 06:55:01 root CRON[5665]: pam_unix(cron:session): session closed for user root Nov 4 07:05:01 root CRON[5703]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 07:05:01 root CRON[5703]: pam_unix(cron:session): session closed for user root Nov 4 07:09:01 root CRON[5723]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 07:09:01 root CRON[5723]: pam_unix(cron:session): session closed for user root Nov 4 07:15:01 root CRON[5787]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 07:15:01 root CRON[5787]: pam_unix(cron:session): session closed for user root Nov 4 07:17:01 root CRON[5796]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 07:17:01 root CRON[5796]: pam_unix(cron:session): session closed for user root Nov 4 07:25:01 root CRON[5838]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 07:25:01 root CRON[5838]: pam_unix(cron:session): session closed for user root Nov 4 07:35:01 root CRON[5879]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 07:35:01 root CRON[5879]: pam_unix(cron:session): session closed for user root Nov 4 07:39:01 root CRON[5896]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 07:39:01 root CRON[5896]: pam_unix(cron:session): session closed for user root Nov 4 07:45:01 root CRON[5960]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 07:45:01 root CRON[5960]: pam_unix(cron:session): session closed for user root Nov 4 07:55:01 root CRON[6001]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 07:55:01 root CRON[6001]: pam_unix(cron:session): session closed for user root Nov 4 08:05:02 root CRON[6039]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 08:05:02 root CRON[6039]: pam_unix(cron:session): session closed for user root Nov 4 08:09:01 root CRON[6060]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 08:09:01 root CRON[6060]: pam_unix(cron:session): session closed for user root Nov 4 08:15:01 root CRON[6124]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 08:15:01 root CRON[6124]: pam_unix(cron:session): session closed for user root Nov 4 08:17:01 root CRON[6136]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 08:17:01 root CRON[6136]: pam_unix(cron:session): session closed for user root Nov 4 08:25:01 root CRON[6176]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 08:25:01 root CRON[6176]: pam_unix(cron:session): session closed for user root Nov 4 08:25:04 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 4 08:25:04 root lightdm: gkr-pam: unable to locate daemon control file Nov 4 08:25:04 root lightdm: gkr-pam: stashed password to try later in open session Nov 4 08:25:07 root lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm Nov 4 08:25:07 root systemd-logind[569]: Removed session c2. Nov 4 08:35:01 root CRON[6221]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 08:35:01 root CRON[6221]: pam_unix(cron:session): session closed for user root Nov 4 08:39:01 root CRON[6239]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 08:39:01 root CRON[6239]: pam_unix(cron:session): session closed for user root Nov 4 08:45:01 root CRON[6302]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 08:45:01 root CRON[6302]: pam_unix(cron:session): session closed for user root Nov 4 08:55:01 root CRON[6339]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 4 08:55:01 root CRON[6339]: pam_unix(cron:session): session closed for user root Nov 5 19:05:01 root CRON[6583]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 5 19:05:01 root CRON[6583]: pam_unix(cron:session): session closed for user root Nov 5 19:09:01 root CRON[6602]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 5 19:09:01 root CRON[6602]: pam_unix(cron:session): session closed for user root Nov 5 19:14:24 root lightdm: pam_unix(lightdm-greeter:session): session opened for user lightdm by (uid=0) Nov 5 19:14:24 root systemd-logind[569]: New session c3 of user lightdm. Nov 5 19:14:25 root systemd: pam_unix(systemd-user:session): session opened for user lightdm by (uid=0) Nov 5 19:14:39 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 5 19:14:39 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 5 19:15:01 root CRON[6742]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 5 19:15:01 root CRON[6742]: pam_unix(cron:session): session closed for user root Nov 5 19:17:01 root CRON[6749]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 5 19:17:01 root CRON[6749]: pam_unix(cron:session): session closed for user root Nov 5 19:25:01 root CRON[6782]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 5 19:25:01 root CRON[6782]: pam_unix(cron:session): session closed for user root Nov 5 19:28:43 root lightdm: pam_unix(lightdm:auth): Couldn't open /etc/securetty: No such file or directory Nov 5 19:28:43 root lightdm: gkr-pam: unable to locate daemon control file Nov 5 19:28:43 root lightdm: gkr-pam: stashed password to try later in open session Nov 5 19:28:44 root lightdm: pam_unix(lightdm-greeter:session): session closed for user lightdm Nov 5 19:28:44 root systemd-logind[569]: Removed session c3. Nov 5 19:30:40 root sudo: pam_unix(sudo:auth): Couldn't open /etc/securetty: No such file or directory Nov 5 19:30:45 root sudo: pam_unix(sudo:auth): Couldn't open /etc/securetty: No such file or directory Nov 5 19:30:46 root sudo: kenali : TTY=pts/0 ; PWD=/home/kenali ; USER=root ; COMMAND=/usr/bin/cat /var/log/auth.log Nov 5 19:30:46 root sudo: pam_unix(sudo:session): session opened for user root by (uid=0)

dQw4w9WgXcQ 2020-11-06 06:39 reporter ~0013653	@kenali After looking over the logs you provided, I can see you already tried some actions that I was going to say but I am not going to be bothered saying <i>Try this and see if that works</i> kind of thing because you already tried that... but I highly recommend that perhaps you use /var/log/auth.log /var/log/syslog and maybe if you have it /var/log/sssd/* to your advantage when performing online web searches because after looking through the logs you provided and cross checking them with web query's I found some useful information but it's just the matter of sorting them out and see which one applies to your current situation hence why I don't want to post a working answer because it might be incorrect. for example I found a site located at https://community.nethserver.org/t/log-in-with-domain-credentials/5531/2 that was based on the information in the logs provided here (this forum post) and I don't know if might be useful but you get the idea... you should also attempt to use a variety of search engines to your advantage because I noticed I was able to find more information on other search engines than let's say www.google.com for example www.yandex.com \| www.bing.com \| www.google.com \| www.duckduckgo.com \| etc and all you have to do is just read through the log files and perhaps other information that's not in log files as well carefully and just copy & paste a piece of data from it and type it into a search query input and attempt to sort through the information that was provided from the search query and find which one is useful or applies to your current situation. not to be rude or anything but next time when posting log files try and censor sensitive information out or perhaps replace it with fake data because sometimes logs may or may not include information and that can be used against you. I can't officially give you a working answer because only you know the full story or current status of your situation but I can advise to you read through the logs and apply basic/advanced troubleshooting techniques to your problem and research to see if there is perhaps a working solution to the current problem. Again I apologize that I cannot give a solution but it's just I found a lot of information online and I can't be sure if it will solve your problem so therefore I don't want to give a false solution. I can only show you the door but you're the one that has to walk through it. Best of luck and I hope you find what you're looking for :)

dQw4w9WgXcQ 2020-11-06 12:56 reporter ~0013654	Ok after double backing... Can you confirm that the following files have been made after the first time you authenticated with realm join : <b>/etc/sssd/sssd.conf </b> <b>/etc/krb.conf</b> <b>/etc/krb5.keytab</b>

dQw4w9WgXcQ 2020-11-06 13:11 reporter ~0013655	because I hope the problem you are experiencing has something to with the <b>sssd.conf</b>... </ br> <i>maybe</i> <b>WAIT!</b> <i>"The dependencies are installed with their default configurations. This may or may not work with your environment's specific set up. Additional configuration may be necessary before domain accounts can be authenticated" <a href="https://www.techrepublic.com/article/how-to-join-a-linux-computer-to-an-active-directory-domain/"><button>Source Information</button></a></i>

kenali 2020-11-06 13:26 reporter ~0013656	username@xxx:~$ sudo cat /etc/sssd/sssd.conf [sssd] domains = domain.com config_file_version = 2 services = nss, pam [domain/domain.com] default_shell = /bin/bash ad_server = xxx.xxx.xxx.xxx krb5_store_password_if_offline = True cache_credentials = True krb5_realm = DOMAIN.COM realmd_tags = manages-system joined-with-adcli id_provider = ad fallback_homedir = /home/%u@%d ad_domain = domain.com use_fully_qualified_names = True ldap_id_mapping = True access_provider = ad username@xxx:~$ sudo cat /etc/krb.conf cat: /etc/krb.conf: No such file or directory username@xxx:~$ sudo cat /etc/krb5.keytab ��9�▒��l��'��%��$$~��0��"�i!`� �� '�b>H<�%��$$~��0��"�i!`��9�▒m�ɕ#�7>�� kenali@root:~$

dQw4w9WgXcQ 2020-11-06 14:08 reporter ~0013657	I've edited the <i>sssd.conf</i> but I can't be sure if it will solve the problem because I mostly be reading on redhat.com but you can give this a try <b>SO YOU MAY WANT TO HAVE A COPY THE ORIGINAL SSSD.CONF AND SAVE IT TO SOMEWHERE YOU WILL REMEMBER</b> <b>sorry for caps</b> <b></b> <i>this means edited, so please look carefully remove them</i> [sssd] domains = domain.com config_file_version = 2 services = nss, pam, pac [domain/domain.com] default_shell = /bin/bash ad_server = xxx.xxx.xxx.xxx krb5_store_password_if_offline = True cache_credentials = True krb5_realm = DOMAIN.COM realmd_tags = manages-system joined-with-adcli id_provider = ad fallback_homedir = /home/%u@%d ad_domain = domain.com use_fully_qualified_names = True ldap_id_mapping = True access_provider = ad auth_provider = ad* chpass_provider = ad ad_enable_gc = False ad_gpo_map_interactive = +unity ad_gpo_access_control = permissive

kenali 2020-11-06 14:18 reporter ~0013658	The last time that I had to nano and tweak the krb5.conf and sssd.conf file, it was as follows but since learning about "sudo realm join -v –U administrator [IP or domain.com] --install=/" could replicate if not one but both files on its own: kenali@root:~$ sudo nano /etc/krb5.conf [libdefaults] default_realm = domain.com rdns = no dns_lookup_kdc = true dns_lookup_realm = true [realms] domain.com = { kdc = subdomain.domain.com admin_server = subdomain.domain.com default_domain = domain.com } [domain_realm] .domain.com = DOMAIN.COM domain.com = DOMAIN.COM kenali@root:~$ sudo nano /etc/sssd/sssd.conf [sssd] domains = domain.com config_file_version = 2 services = nss, pam [nss] entry_negative_timeout = 0 debug_level = 5 [pam] debug_level = 5 [domain/domain.com] debug_level = 10 default_shell = /bin/bash ldap_sasl_mech = gssapi ldap_sasl_authid = root$ ldap_krb5_init_creds = true krb5_keytab = /etc/sssd/my-keytab.keytab ad_server = root.domain.com ad_server = 192.168.1.2 krb5_store_password_if_offline = True cache_credentials = True krb5_realm = DOMAIN.COM realmd_tags = manages-system joined-with-adcli id_provider = ad fallback_homedir = /home/%u@%d ad_domain = domain.com use_fully_qualified_names = True ldap_schema = ad ldap_id_mapping = True enumerate = false id_provider = ad auth_provider = ad chpass_provider = ad access_provider = ad dyndns_update = false ad_hostname = root.domain.com

kenali 2020-11-06 14:31 reporter ~0013659	I'll look into the edited version of SSSD.CONF now and see what happens

kenali 2020-11-06 14:50 reporter ~0013665	I made the changes to SSSD.CONF but getting this new and weird error as follows now: "Your password is incorrect. Please try again." Before: "Sorry, that didn't work. Please try again."

dQw4w9WgXcQ 2020-11-07 03:10 reporter ~0013667	for the file <i>sssd.conf</i> with <b>services = nss, pam</b> can you try this <b>services = nss, pam, autofs</b> now in the section <b><i>domain/domain.com</i></b> replace the bold italic parts with your own info and perhaps try this if you want: autofs_provider = ad ldap_autofs_entry_key = cn ldap_autofs_entry_object_class = nisObject ldap_autofs_entry_value = nisMapEntry ldap_autofs_map_name = nisMapName ldap_autofs_map_object_class = nisMap ldap_autofs_search_base = ou=<b><i>automapper<i></b>, dc=<b><i>yourdomain<i></b>, dc=<b><i>com</i></b> then make the <i>sssd.conf</i> file owned by root by doing <b>:~$chown root:root /etc/sssd/sssd.conf</b> after that do <b>:~$chmod 600 /etc/sssd/sssd.conf</b> to check if it worked do <b>:~$ls -l /etc/sssd/sssd.conf</b> begin the SSSD and make sure it's up after reboot by doing <b>:~$systemctl start sssd</b> followed by <b>:~$systemctl is-active sssd</b> [<i>it should show active</i>] then <b>:~$systemctl enable sssd</b> then delete the SSSD cache by <b>:~$rm -rf /var/lib/sss/db/*</b> after that restart sssd and autofs just to make sure by doing <b>:~$service sssd restart</b> and <b>:~$service autofs restart</b> Notes: <b><i>you may have to install autofs via :~$apt-get install autofs</i></b> and <b><i>check to see if you have /var/lib/sss/db/</i></b> before you continue with rm

kenali 2020-11-07 16:22 reporter ~0013669	The only message I keep getting past this step ":~$systemctl enable sssd" is "Authentication is required to reload the system state." and to which the password entered triggers for that same "Authenticate" message again.

kenali 2020-11-07 16:34 reporter ~0013670	I was able to do "~$systemctl enable sssd" after "sudo su" and the same goes for "~$rm -rf /var/lib/sss/db/*"

kenali 2020-11-07 18:01 reporter ~0013671	I made the changes but the error continues: "Your password is incorrect. Please try again."

kenali 2020-11-22 03:13 reporter ~0013693	I upgraded to Kali Linux 2020.4 system by running commands and seting the default shell to ZSH as follows but the GDM3 login screen resurfaces:: $ sudo apt update && sudo apt -y full-upgrade $ cp -i /etc/skel/.zshrc ~/ $ chsh -s /bin/zsh $ zsh

g0tmi1k 2021-09-14 20:07 administrator ~0015121	This report has been filed against an old version of Kali. We will be closing this ticket due to inactivity. Please could you see if you are able to replicate this issue with the latest version of Kali Linux (https://www.kali.org/get-kali/)? If you are still facing the same problem, feel free to re-open the ticket. If you choose to do this, could you provide more information to the issue you are facing, and also give information about your setup? For more information, please read: https://kali.training/topic/filing-a-good-bug-report/

Date Modified	Username	Field	Change
2020-11-05 21:14	kenali	New Issue
2020-11-05 23:32	dQw4w9WgXcQ	Note Added: 0013649
2020-11-05 23:34	dQw4w9WgXcQ	Note Added: 0013650
2020-11-06 00:23	kenali	Note Added: 0013651
2020-11-06 00:46	kenali	Note Added: 0013652
2020-11-06 06:39	dQw4w9WgXcQ	Note Added: 0013653
2020-11-06 12:56	dQw4w9WgXcQ	Note Added: 0013654
2020-11-06 13:11	dQw4w9WgXcQ	Note Added: 0013655
2020-11-06 13:26	kenali	Note Added: 0013656
2020-11-06 14:08	dQw4w9WgXcQ	Note Added: 0013657
2020-11-06 14:18	kenali	Note Added: 0013658
2020-11-06 14:31	kenali	Note Added: 0013659
2020-11-06 14:50	kenali	Note Added: 0013665
2020-11-07 03:10	dQw4w9WgXcQ	Note Added: 0013667
2020-11-07 16:22	kenali	Note Added: 0013669
2020-11-07 16:34	kenali	Note Added: 0013670
2020-11-07 18:01	kenali	Note Added: 0013671
2020-11-22 03:13	kenali	Note Added: 0013693
2020-12-01 10:48	g0tmi1k	Priority	immediate => normal
2020-12-01 10:50	g0tmi1k	Severity	major => minor
2021-09-14 20:07	g0tmi1k	Status	new => closed
2021-09-14 20:07	g0tmi1k	Resolution	open => no change required
2021-09-14 20:07	g0tmi1k	Note Added: 0015121

View Issue Details

Activities

debug_level = 5

debug_level = 5

debug_level = 10

ad_server = root.domain.com

Issue History