cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
873
Views
0
Helpful
1
Replies

Error from RTMT: sshd(pam_unix)[17823]

CleverDrake
Level 1
Level 1

All,

I am receiving this error from a customer's SUB. From what I can gather, this error is generated when someone tries to login to the CCM from ssh and fails. What has me worried is the volume of these errors. They have been going non-stop for a day now. Is this an attack on the network? Here is a sample of the errors:

sshd(pam_unix)[20151]: check pass; user unknown SeverityMatch - Alert sshd(pam_unix)[20170]: check pass; user unknown SeverityMatch - Alert sshd(pam_unix)[20184]: check pass; user unknown SeverityMatch - Alert sshd(pam_unix)[20197]: check pass; user unknown

1 Reply 1

Not applicable

When a terminal server is connected to the serial port of a Cisco Unified Communications Manager server, the system generates a repeating alert message and corresponding syslog messages. Try to configure no exec on the lines that are connected to the console of the other devices.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: