Am 15.08.2014 20:34, schrieb Joe: > > Apart from 'nobody', according to /etc/passwd. He seems to login most > sessions, and when he does, he causes the dreaded two-minute shutdown. > > Here's what I can find in journalctl: > >> sudo journalctl | grep user-65534 > > Aug 06 07:56:20 jresid systemd[1]: Starting user-65534.slice. > Aug 06 07:56:20 jresid systemd[1]: Created slice user-65534.slice. > Aug 06 20:05:54 jresid systemd[1]: Stopping user-65534.slice. > Aug 06 20:05:54 jresid systemd[1]: Removed slice user-65534.slice. > Aug 07 07:58:40 jresid systemd[1]: Starting user-65534.slice. > Aug 07 07:58:40 jresid systemd[1]: Created slice user-65534.slice. > Aug 07 20:57:31 jresid systemd[1]: Stopping user-65534.slice. > Aug 07 20:57:31 jresid systemd[1]: Removed slice user-65534.slice. > Aug 11 08:27:34 jresid systemd[1]: Starting user-65534.slice. > Aug 11 08:27:34 jresid systemd[1]: Created slice user-65534.slice. > Aug 11 09:10:25 jresid systemd[1]: Stopping user-65534.slice. > Aug 11 09:10:25 jresid systemd[1]: Removed slice user-65534.slice. > Aug 12 08:32:09 jresid systemd[1]: Starting user-65534.slice. > Aug 12 08:32:09 jresid systemd[1]: Created slice user-65534.slice. > Aug 12 22:17:40 jresid systemd[1]: Stopping user-65534.slice. > Aug 12 22:17:40 jresid systemd[1]: Removed slice user-65534.slice. > Aug 13 15:16:24 jresid systemd[1]: Starting user-65534.slice. > Aug 13 15:16:24 jresid systemd[1]: Created slice user-65534.slice. > Aug 13 21:51:37 jresid systemd[1]: Stopping user-65534.slice. > Aug 13 21:51:37 jresid systemd[1]: Removed slice user-65534.slice. > Aug 14 08:23:02 jresid systemd[1]: Starting user-65534.slice. > Aug 14 08:23:02 jresid systemd[1]: Created slice user-65534.slice. > Aug 14 20:39:35 jresid systemd[1]: Stopping user-65534.slice. > Aug 14 20:39:35 jresid systemd[1]: Removed slice user-65534.slice. > Aug 15 07:09:41 jresid systemd[1]: Starting user-65534.slice. > Aug 15 07:09:41 jresid systemd[1]: Created slice user-65534.slice. > Aug 15 07:27:28 jresid systemd[1]: Stopping user-65534.slice. > Aug 15 07:27:28 jresid systemd[1]: Removed slice user-65534.slice.
Those might be cron jobs which start a new PAM session. Could you check the dates when cron is running? -- Why is it that all of the instruments seeking intelligent life in the universe are pointed away from Earth?
signature.asc
Description: OpenPGP digital signature
