[Eisfair] Mails: Output from your job

[Stefan H.]

Hallo Marcus,

> Bitte in /var/log/messages nach dieser PID suchen:
> 
> grep "[...]" /var/log/messages
> 
> und posten.


[2432] (das ist die letzte Mail, die ich bekommen habe) ist in 
/var/log/messages nicht zu finden.

# grep "\[2432\]" /var/log/messages
#

Zur fraglichen Zeit der letzten Mail steht folgendes in /var/log/messages:

Mar 10 11:48:07 www sshd[28216]: Accepted publickey for root from 
192.168.178.5 port 59774 ssh2: ED25519 SHA256:xxx
Mar 10 11:48:07 www sshd[28216]: pam_unix(sshd:session): session opened 
for user root(uid=0) by (uid=0)
Mar 10 11:48:07 www sshd[28216]: Received disconnect from 192.168.178.5 
port 59774:11: disconnected by user
Mar 10 11:48:07 www sshd[28216]: Disconnected from user root 
192.168.178.5 port 59774
Mar 10 11:48:07 www sshd[28216]: pam_unix(sshd:session): session closed 
for user root
Mar 10 11:48:45 www dhcpd[676]: Adap-lease: Total: 21, Free: 19, Ends: 
1799, Adaptive: 1799, Fill: 9, Threshold: 70
Mar 10 11:48:45 www dhcpd[676]: DHCPREQUEST for 192.168.178.140 from 
02:78:b3:ad:57:52 via net0
Mar 10 11:48:45 www dhcpd[676]: DHCPACK on 192.168.178.140 to 
02:78:b3:ad:57:52 via net0
Mar 10 11:48:45 www dhcpd[676]: Added new forward map from 
dynamicc0a8b28c.fam-heidrich.net to 192.168.178.140
Mar 10 11:48:45 www dhcpd[676]: Added reverse map from 
140.178.168.192.in-addr.arpa. to dynamicc0a8b28c.fam-heidrich.net
Mar 10 11:49:00 www atd[28268]: pam_unix(atd:session): session opened 
for user root(uid=0) by (uid=494)
Mar 10 11:49:01 www atd[28268]: pam_unix(atd:session): session closed 
for user root
Mar 10 11:49:07 www sshd[29050]: Accepted publickey for root from 
192.168.178.5 port 58106 ssh2: ED25519 SHA256:xxx
Mar 10 11:49:07 www sshd[29050]: pam_unix(sshd:session): session opened 
for user root(uid=0) by (uid=0)
Mar 10 11:49:08 www sshd[29050]: Received disconnect from 192.168.178.5 
port 58106:11: disconnected by user
Mar 10 11:49:08 www sshd[29050]: Disconnected from user root 
192.168.178.5 port 58106
Mar 10 11:49:08 www sshd[29050]: pam_unix(sshd:session): session closed 
for user root


In /var/log/certs-update.crl.log findet sich zur fraglichen Zeit folgendes:

M.r 10 11:49:00 www certs-update-crl[28273]: 
/var/install/bin/certs-update-crl --quiet --single 
http://ocsp.accv.es/!ACCVRAIZ1.pem
M.r 10 11:49:00 www certs-update-crl[28273]: - downloading 
'http://ocsp.accv.es/!ACCVRAIZ1.pem' ...
M.r 10 11:49:00 www certs-update-crl[28629]: 
/var/install/bin/certs-update-crl --quiet --showsingleuri 
/usr/local/ssl/certs/ACCVRAIZ1.pem
M.r 10 11:49:00 www certs-update-crl[28629]: finished.
M.r 10 11:49:00 www certs-update-crl[28273]: - updating CRL list ...
M.r 10 11:49:00 www certs-update-crl[28273]: - job '3404' (2024-03-10 
11:49->2024-08-21 09:16) updated.
M.r 10 11:49:00 www certs-update-crl[28273]:   url: 
http://ocsp.accv.es/!ACCVRAIZ1.pem
M.r 10 11:49:01 www certs-update-crl[28273]: updating hashes ...
M.r 10 11:49:01 www certs-update-crl[28273]: finished.


In /var/spool/exim/log/mainlog sehe ich zu der Zeit die versendete Mail:

2024-03-10 11:49:01 1rjGjl-0007Lw-2X <= root at fam-heidrich.net U=root 
P=local S=455
2024-03-10 11:49:01 1rjGjl-0007Lw-2X => postm <root at fam-heidrich.net> 
R=localuser_maildir T=local_delivery_maildir
2024-03-10 11:49:01 1rjGjl-0007Lw-2X Completed


In keinem anderen Logfile findet sich zu diese Zeit wirklich etwas.

Viele Grüße und Danke
Stefan