Results 1 to 2 of 2

Thread: Where is this cron job coming from?

  1. #1
    Join Date
    Sep 2007

    Where is this cron job coming from?

    Running Ubuntu 12.10 desktop, but with a number of server daemons installed and running:

    Every hour, at minute 17, I'm seeing this message in auth.log:

    May 1 18:17:01 derp CRON[7205]: pam_unix(cron:session): session closed for user root

    When I change my session to the root user, and type crontab -l, the output is no crontab for root. I'm guessing that this is something pretty normal and benign, but I wanted to make sure. Is there another location that I should be looking for to see where this mysterious cron behavior is coming from? Is this not cron behavior at all? Is it possible that, say, my SQL server, Apache server, etc. are causing this behavior?
    Last edited by pmains; May 3rd, 2013 at 06:32 AM.

  2. #2
    Join Date
    Sep 2007
    In here watching you!

    Re: Where is this cron job coming from?

    This is normal.

    cron has to be authenticated with the pam system just like everyone else. cron checks config files to see if anything has changed periodically. That is want you are seeing, the pam_unix sessions opening and closing. On some Linux systems it happens every 10 minutes.
    Use whatever OS or desktop works for you. Dual boot or use VMs if you want. Backup your computer regularly, and definitely before upgrading, partitioning, or installing an OS.

    No support requests by PM please.


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts