set_loginuid failed opening loginuid

[dbs]

Hi,
In my FC5 VPS log file /var/log/secure
I see messages like
pam_loginuid( ): set_loginuid failed opening loginuid
actually for all applications which support PAM.

I found a thread http://www.redhat.com/archives/fedor.../msg00988.html
which says:

If this file doesn't exist:
/proc/<pid of crond>/loginuid
It's because the kernel doesn't have AUDIT enabled.
Set "CONFIG_AUDIT=y" (menuconfig: Under "General setup" enable "Auditing support"), recompile kernel, reboot with new kernel.
Now you shouldn't see any more of these messages

Since we cannot recompile the kernel on VPS.
Is there a way to suppress these messages by changing PAM configuration files?

Thanks

[imported_matta]

This may be fixed by SWSoft's steps in their Knowledge Base.

http://kb.swsoft.com/article_133_1146_en.html

[dbs]

Hi,
ı did the settings as in Swsoft forum and restarted the sshd

/etc/ssh/sshd_config:
UsePAM no
UseLogin yes

But it insisted using PAM and continued putting "set_loginuid failed opening loginuid" message in the log.

I commented out pam_loginuid.so in /etc/pam.d/sshd

auth include system-auth
account required pam_nologin.so
account include system-auth
password include system-auth
session include system-auth
##session required pam_loginuid.so

Would this workaround cause any security problems?

Thanks

[imported_matta]

I do not believe so as PAM is no longer being used for authentication.

[dbs]

I do not believe so as PAM is no longer being used for authentication.

I checked many times.

with this combination
UsePam no
UseLogin yes
sshd still uses PAM.

if only I set both to
UsePam no
UseLogin no
then it is not using PAM.

So I will leave sshd_config as default and only comment pam_loginuid.so from /etc/pam.d/sshd

Thanks for your help

[sumansameer]

I have received an e-mail with the subject "TekTonic - New subscription setup!"