[rabbitmq-discuss] [rabbitmq] /var/log/messages flooded with su: (to rabbitmq) root on none

Thu Oct 24 17:24:17 BST 2013

Did you see Michael's response to your previous posting of the same 
question, here?

http://lists.rabbitmq.com/pipermail/rabbitmq-discuss/2013-October/031288.html

Cheers, Simon

On 24/10/13 17:19, Narasappa, Usha wrote:
> Hi,
>
> We use rabbitmq-c amqp client (0.2.0) to publish messages to RabbitMQ
> broker. The /var/log/messages file is flooded with the following:
>
> Oct 23 05:32:29 director-1-1-a su: pam_limits(su:session): invalid line
> '^H' - skipped
>
> Oct 23 05:32:44 director-1-1-a su: (to rabbitmq) root on none
>
> Oct 23 05:32:44 director-1-1-a su: pam_limits(su:session): invalid line
> '^H' - skipped
>
> Oct 23 05:32:59 director-1-1-a su: (to rabbitmq) root on none
>
> Oct 23 05:32:59 director-1-1-a su: pam_limits(su:session): invalid line
> '^H' - skipped
>
> Oct 23 05:33:14 director-1-1-a su: (to rabbitmq) root on none
>
> It appears that root used the su command to take on the identity of
> "rabbitmq".
>
> I also see that /etc/passwd file has the "rabbitmq" username which kind
> of proves the above theory.
>
> It would be of great help if you could let me know what exactly is done
> after taking on the identity of "rabbitmq".
>
> Basically, I am searching a way to turn off these messages so that
> /var/log/messages does not overgrow and lose important information.
>
> As an additional information, logs under /var/log/rabbitmq do not have
> any error messages.
>
> Any other clues/suggestions/pointers are  welcome.
>
> Thanks,
>
> Usha
>
>
>
> _______________________________________________
> rabbitmq-discuss mailing list
> rabbitmq-discuss at lists.rabbitmq.com
> https://lists.rabbitmq.com/cgi-bin/mailman/listinfo/rabbitmq-discuss
>

-- 
Simon MacMullen
RabbitMQ, Pivotal