this is not a valid system user unless you have manually added it to the system. I do think the logs would show more if access was granted. Why are you exposing sshd to the outside world with an acl or by protecting it at your firewall?
On Thu, Oct 11, 2012 at 11:48 PM, Noah Mehl <[email protected]> wrote: > All, > > I just realized that my emails from my SipXecs 4.4 server were not being delivered. Upon further investigation, I found that my SipXecs VM had a sendmail queue with over 13000 messages in it. I'm trying to figure out how my machine was sending mail, and it doesn't look like the relay is open, but I found something curious: > > [root@sipx1 log]# cat secure | grep "pam_unix(sshd:session): session opened" > Oct 11 06:09:25 sipx1 sshd[22059]: pam_unix(sshd:session): session opened for user PlcmSpIp by (uid=0) > Oct 11 18:36:02 sipx1 sshd[29185]: pam_unix(sshd:session): session opened for user PlcmSpIp by (uid=0) > Oct 11 18:36:16 sipx1 sshd[29192]: pam_unix(sshd:session): session opened for user PlcmSpIp by (uid=0) > Oct 11 18:36:21 sipx1 sshd[29195]: pam_unix(sshd:session): session opened for user PlcmSpIp by (uid=0) > Oct 11 20:57:58 sipx1 sshd[30561]: pam_unix(sshd:session): session opened for user PlcmSpIp by (uid=0) > > Those are what I think to be successful ssh logins with the user PlcmSplp. Is this user part of the SipXecs install? > > ~Noah > > Scanned for viruses and content by the Tranet Spam Sentinel service. > _______________________________________________ > sipx-users mailing list > [email protected] > List Archive: http://list.sipfoundry.org/archive/sipx-users/ -- ~~~~~~~~~~~~~~~~~~ Tony Graziano, Manager Telephone: 434.984.8430 sip: [email protected] Fax: 434.465.6833 ~~~~~~~~~~~~~~~~~~ Linked-In Profile: http://www.linkedin.com/pub/tony-graziano/14/4a6/7a4 Ask about our Internet Fax services! ~~~~~~~~~~~~~~~~~~ Using or developing for sipXecs from SIPFoundry? Ask me about sipX-CoLab 2013! -- LAN/Telephony/Security and Control Systems Helpdesk: Telephone: 434.984.8426 sip: [email protected] Helpdesk Customers: http://myhelp.myitdepartment.net Blog: http://blog.myitdepartment.net
_______________________________________________ sipx-users mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-users/
