Solved

Solaris 10 su - fail can't send email

Posted on 2010-09-14
9
1,131 Views
Last Modified: 2013-12-16
My server was able to send an email to me whenever someone fail to su to root.
Recently this is not happening.
I checked the syslog.conf:
#ident  "@(#)syslog.conf        1.5     98/12/14 SMI"   /* SunOS 5.0 */
#
# Copyright (c) 1991-1998 by Sun Microsystems, Inc.
# All rights reserved.
#
# syslog configuration file.
#
# This file is processed by m4 so be careful to quote (`') names
# that match m4 reserved words.  Also, within ifdef's, arguments
# containing commas must be quoted.
#
*.err;kern.notice;auth.notice                   /dev/sysmsg
*.err;kern.debug;daemon.notice;mail.crit        /var/adm/messages

*.alert;kern.err;daemon.err                     operator
*.alert                                         root

*.emerg                                         *

# Logging FTP activities
daemon.info                                     /var/adm/ftp.log
#

# if a non-loghost machine chooses to have authentication messages
# sent to the loghost machine, un-comment out the following line:
#auth.notice                    ifdef(`LOGHOST', /var/log/authlog, @loghost)

mail.debug                      ifdef(`LOGHOST', /var/log/syslog, @loghost)

#
# non-loghost machines will use the following lines to cause "user"
# log messages to be logged locally.
#
ifdef(`LOGHOST', ,
user.err                                        /dev/sysmsg
user.err                                        /var/adm/messages
user.alert                                      `root, operator'
user.emerg                                      *
)

and my email address is in the /etc/aliases root section:
#######################
# Local aliases below #
#######################
root:abc.efg@company.com,xyz.pqr@company.com

Please help
0
Comment
Question by:USTTN-LAN
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
  • 2
9 Comments
 
LVL 16

Expert Comment

by:Joseph Gan
ID: 33676971
Is syslog daemon running? ie.

# ps -ef | grep syslogd

0
 

Author Comment

by:USTTN-LAN
ID: 33681099
it is, I got other alert from the system.
0
 
LVL 16

Expert Comment

by:Joseph Gan
ID: 33686179
What about sendmail, ie.

# ps -ef | grep sendmail
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:USTTN-LAN
ID: 33686435
sendmail is up too
0
 
LVL 16

Expert Comment

by:Joseph Gan
ID: 33686924
Do you have a loginglog setup, this file does not exist by default.
If this file exists, the login program records failed login attempts.
The file should be create in /var/adm directory.
0
 
LVL 16

Expert Comment

by:Joseph Gan
ID: 33686969
0
 
LVL 13

Expert Comment

by:Rowley
ID: 33704603
Check for invalid field separators between values in syslog.conf. Not sure if posting messed with the formatting or not, but its worth checking.
view syslog.conf
set line
 
0
 
LVL 13

Expert Comment

by:Rowley
ID: 33723022
the vi option is actually "set list". Ensure that there are only "^I" characters between the log facility and levels, eg:

*.alert^I^I^I^Iroot$
0
 

Accepted Solution

by:
USTTN-LAN earned 0 total points
ID: 33894797
found out we actually have a script to do so
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In tuning file systems on the Solaris Operating System, changing some parameters of a file system usually destroys the data on it. For instance, changing the cache segment block size in the volume of a T3 requires that you delete the existing volu…
Every server (virtual or physical) needs a console: and the console can be provided through hardware directly connected, software for remote connections, local connections, through a KVM, etc. This document explains the different types of consol…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…
This video shows how to set up a shell script to accept a positional parameter when called, pass that to a SQL script, accept the output from the statement back and then manipulate it in the Shell.

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question