From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gentoo-user+bounces-145371-garchives=archives.gentoo.org@lists.gentoo.org>
Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80])
	by finch.gentoo.org (Postfix) with ESMTP id 921F9138A49
	for <garchives@archives.gentoo.org>; Fri, 15 Feb 2013 06:44:44 +0000 (UTC)
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id AC99C21C028;
	Fri, 15 Feb 2013 06:44:34 +0000 (UTC)
Received: from mail-da0-f46.google.com (mail-da0-f46.google.com [209.85.210.46])
	(using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
	(No client certificate requested)
	by pigeon.gentoo.org (Postfix) with ESMTPS id E86A921C001
	for <gentoo-user@lists.gentoo.org>; Fri, 15 Feb 2013 06:44:32 +0000 (UTC)
Received: by mail-da0-f46.google.com with SMTP id p5so1331676dak.19
        for <gentoo-user@lists.gentoo.org>; Thu, 14 Feb 2013 22:44:31 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=x-received:message-id:date:from:user-agent:mime-version:to:subject
         :references:in-reply-to:content-type:content-transfer-encoding;
        bh=L9FSRJdSXQae8me8gofJRjHfbVnBR8K2RlbPmFuXS+4=;
        b=bXUSmbSANlgRzWN0fcQUAarqbBqavZjpVOKxWoSLj4POAHx5P9td9qN8wZDMLyVKSR
         WsWZZe4TrZR/WdO69o7tx2SB7WzXZsFD/LXEysS7GjEha2zyladUORCeeWdAzOsUBcSU
         AALGsUySMfrqUuoW3EqJdHl7rhtxN8LHieaDScCsnkGB/3hgsOLhJ1U7raAE/gCzzhlk
         +TkEYfCfBXAI19Tku6VDO8woVGhPhu3eDUGnJx8qW+EEarOIkGfCCPcsIkIc8HuhhHKB
         vTLmY7wQWacd8zRtGcHNg9ms4X032cSH+O9m4hu6MKPxVHtbmOCSpVHE3vMde7gLyVnM
         colw==
X-Received: by 10.68.42.39 with SMTP id k7mr3422932pbl.138.1360910671825;
        Thu, 14 Feb 2013 22:44:31 -0800 (PST)
Received: from [192.168.247.60] (76-10-184-249.dsl.teksavvy.com. [76.10.184.249])
        by mx.google.com with ESMTPS id a10sm3775941pbq.29.2013.02.14.22.44.29
        (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
        Thu, 14 Feb 2013 22:44:30 -0800 (PST)
Message-ID: <511DD94C.2040101@gmail.com>
Date: Thu, 14 Feb 2013 22:44:28 -0800
From: Daniel Frey <djqfrey@gmail.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130131 Thunderbird/17.0.2
Precedence: bulk
List-Post: <mailto:gentoo-user@lists.gentoo.org>
List-Help: <mailto:gentoo-user+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-user+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-user+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-user.gentoo.org>
X-BeenThere: gentoo-user@lists.gentoo.org
Reply-to: gentoo-user@lists.gentoo.org
MIME-Version: 1.0
To: gentoo-user@lists.gentoo.org
Subject: Re: [gentoo-user] pam_get_uid: no such user
References: <511BE981.6030803@gmail.com> <511C1907.6020801@gmail.com> <511C644F.2060407@gmail.com> <E84EC1E4-A610-4387-A1CD-8CA7CECA369E@stellar.eclipse.co.uk> <511D40F9.7080102@gmail.com> <CAC=wYCEuhpJtT_NbzJOkUe_y=NRtDCXHnM5khG_Ze4Zo9dRQ_g@mail.gmail.com>
In-Reply-To: <CAC=wYCEuhpJtT_NbzJOkUe_y=NRtDCXHnM5khG_Ze4Zo9dRQ_g@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Archives-Salt: 27ee0959-e630-4e77-8ef1-d74af3c5617a
X-Archives-Hash: c2864c50fe76b5a27c14cb3649383e19

On 02/14/2013 04:15 PM, Adam Carter wrote:
> This particular machine doesn't have ssh/xinetd or the like routed from
> 
>     outside the local LAN.
> 
> 
> Unless someone made a mistake with the config somewhere. Run tcpdump to
> be sure.

I just installed tcpdump and checked. During the burst of 5 login
attempts there's no network activity. I tried both interfaces.

It must be something local on the PC that's trying to get access, at
least I know it's not a remote attack.

Dan