auth.log я не нашёл ни в /var/log ни в других местах.
а вот messages:Feb 6 14:19:56 otest1 syslogd 1.4.1: restart.
Feb 6 14:20:01 otest1 kernel: klogd 1.4.1, log source = /proc/kmsg started.
Feb 6 14:20:01 otest1 kernel: usbcore: registered new driver usbfs
Feb 6 14:20:01 otest1 kernel: usbcore: registered new driver hub
Feb 6 14:20:01 otest1 kernel: USB Universal Host Controller Interface driver v2.2
Feb 6 14:20:01 otest1 kernel: ACPI: PCI interrupt 0000:00:1a.0[A] -> GSI 20 (level, low) -> IRQ 18
Feb 6 14:20:01 otest1 kernel: uhci_hcd 0000:00:1a.0: UHCI Host Controller
Feb 6 14:20:01 otest1 kernel: PCI: Setting latency timer of device 0000:00:1a.0 to 64
Feb 6 14:20:01 otest1 kernel: uhci_hcd 0000:00:1a.0: irq 18, io base 00002020
Feb 6 14:20:01 otest1 kernel: uhci_hcd 0000:00:1a.0: new USB bus registered, assigned bus number 1
Feb 6 14:20:01 otest1 kernel: usb usb1: Product: UHCI Host Controller
Feb 6 14:20:01 otest1 kernel: usb usb1: Manufacturer: Linux 2.6.5-7.244-smp uhci_hcd
Feb 6 14:20:01 otest1 kernel: usb usb1: SerialNumber: 0000:00:1a.0
Feb 6 14:20:01 otest1 kernel: hub 1-0:1.0: USB hub found
Feb 6 14:20:01 otest1 kernel: hub 1-0:1.0: 2 ports detected
Feb 6 14:20:01 otest1 kernel: ACPI: PCI interrupt 0000:00:1a.1 -> GSI 21 (level, low) -> IRQ 19
Feb 6 14:20:01 otest1 kernel: uhci_hcd 0000:00:1a.1: UHCI Host Controller
Feb 6 14:20:01 otest1 kernel: PCI: Setting latency timer of device 0000:00:1a.1 to 64
Feb 6 14:20:01 otest1 kernel: uhci_hcd 0000:00:1a.1: irq 19, io base 00002040
Feb 6 14:20:01 otest1 kernel: uhci_hcd 0000:00:1a.1: new USB bus registered, assigned bus number 2
Feb 6 14:20:01 otest1 kernel: usb usb2: Product: UHCI Host Controller
Feb 6 14:20:01 otest1 kernel: usb usb2: Manufacturer: Linux 2.6.5-7.244-smp uhci_hcd
Feb 6 14:20:01 otest1 kernel: usb usb2: SerialNumber: 0000:00:1a.1
Feb 6 14:20:01 otest1 kernel: hub 2-0:1.0: USB hub found
Feb 6 14:20:01 otest1 kernel: hub 2-0:1.0: 2 ports detected
Feb 6 14:20:01 otest1 kernel: ACPI: PCI interrupt 0000:00:1d.0[A] -> GSI 20 (level, low) -> IRQ 18
Feb 6 14:20:01 otest1 kernel: uhci_hcd 0000:00:1d.0: UHCI Host Controller
Feb 6 14:20:01 otest1 kernel: PCI: Setting latency timer of device 0000:00:1d.0 to 64
Feb 6 14:20:01 otest1 kernel: uhci_hcd 0000:00:1d.0: irq 18, io base 00002060
Feb 6 14:20:01 otest1 kernel: uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 3
Feb 6 14:20:01 otest1 kernel: usb usb3: Product: UHCI Host Controller
Feb 6 14:20:01 otest1 kernel: usb usb3: Manufacturer: Linux 2.6.5-7.244-smp uhci_hcd
Feb 6 14:20:01 otest1 kernel: usb usb3: SerialNumber: 0000:00:1d.0
Feb 6 14:20:01 otest1 kernel: hub 3-0:1.0: USB hub found
Feb 6 14:20:01 otest1 kernel: hub 3-0:1.0: 2 ports detected
Feb 6 14:20:01 otest1 kernel: ACPI: PCI interrupt 0000:00:1d.1 -> GSI 21 (level, low) -> IRQ 19
Feb 6 14:20:01 otest1 kernel: uhci_hcd 0000:00:1d.1: UHCI Host Controller
Feb 6 14:20:01 otest1 kernel: PCI: Setting latency timer of device 0000:00:1d.1 to 64
Feb 6 14:20:01 otest1 kernel: uhci_hcd 0000:00:1d.1: irq 19, io base 00002080
Feb 6 14:20:01 otest1 kernel: uhci_hcd 0000:00:1d.1: new USB bus registered, assigned bus number 4
Feb 6 14:20:01 otest1 kernel: usb usb4: Product: UHCI Host Controller
Feb 6 14:20:01 otest1 kernel: usb usb4: Manufacturer: Linux 2.6.5-7.244-smp uhci_hcd
Feb 6 14:20:01 otest1 kernel: usb usb4: SerialNumber: 0000:00:1d.1
Feb 6 14:20:01 otest1 kernel: hub 4-0:1.0: USB hub found
Feb 6 14:20:01 otest1 kernel: hub 4-0:1.0: 2 ports detected
Feb 6 14:20:01 otest1 kernel: hw_random hardware driver 1.0.0 loaded
Feb 6 14:20:01 otest1 kernel: ACPI: PCI interrupt 0000:00:1a.7[C] -> GSI 22 (level, low) -> IRQ 20
Feb 6 14:20:01 otest1 kernel: ehci_hcd 0000:00:1a.7: EHCI Host Controller
Feb 6 14:20:01 otest1 kernel: PCI: Setting latency timer of device 0000:00:1a.7 to 64
Feb 6 14:20:01 otest1 kernel: ehci_hcd 0000:00:1a.7: irq 20, pci mem f9021000
Feb 6 14:20:01 otest1 kernel: ehci_hcd 0000:00:1a.7: new USB bus registered, assigned bus number 5
Feb 6 14:20:01 otest1 kernel: PCI: cache line size of 32 is not supported by device 0000:00:1a.7
Feb 6 14:20:01 otest1 kernel: ehci_hcd 0000:00:1a.7: USB 2.0 enabled, EHCI 1.00, driver 2003-Dec-29
Feb 6 14:20:01 otest1 kernel: usb usb5: Product: EHCI Host Controller
Feb 6 14:20:01 otest1 kernel: usb usb5: Manufacturer: Linux 2.6.5-7.244-smp ehci_hcd
Feb 6 14:20:01 otest1 kernel: usb usb5: SerialNumber: 0000:00:1a.7
Feb 6 14:20:01 otest1 kernel: hub 5-0:1.0: USB hub found
Feb 6 14:20:01 otest1 kernel: hub 5-0:1.0: 4 ports detected
Feb 6 14:20:01 otest1 kernel: ACPI: PCI interrupt 0000:00:1d.7[A] -> GSI 20 (level, low) -> IRQ 18
Feb 6 14:20:01 otest1 kernel: ehci_hcd 0000:00:1d.7: EHCI Host Controller
Feb 6 14:20:01 otest1 kernel: PCI: Setting latency timer of device 0000:00:1d.7 to 64
Feb 6 14:20:01 otest1 kernel: ehci_hcd 0000:00:1d.7: irq 18, pci mem f9023400
Feb 6 14:20:01 otest1 kernel: ehci_hcd 0000:00:1d.7: new USB bus registered, assigned bus number 6
Feb 6 14:20:01 otest1 kernel: PCI: cache line size of 32 is not supported by device 0000:00:1d.7
Feb 6 14:20:01 otest1 kernel: ehci_hcd 0000:00:1d.7: USB 2.0 enabled, EHCI 1.00, driver 2003-Dec-29
Feb 6 14:20:01 otest1 kernel: usb usb6: Product: EHCI Host Controller
Feb 6 14:20:01 otest1 kernel: usb usb6: Manufacturer: Linux 2.6.5-7.244-smp ehci_hcd
Feb 6 14:20:01 otest1 kernel: usb usb6: SerialNumber: 0000:00:1d.7
Feb 6 14:20:01 otest1 kernel: hub 6-0:1.0: USB hub found
Feb 6 14:20:01 otest1 kernel: hub 6-0:1.0: 4 ports detected
Feb 6 14:20:01 otest1 kernel: 8139too Fast Ethernet driver 0.9.27
Feb 6 14:20:01 otest1 kernel: ACPI: PCI interrupt 0000:07:04.0[A] -> GSI 20 (level, low) -> IRQ 18
Feb 6 14:20:01 otest1 kernel: eth0: RealTek RTL8139 at 0xf9025000, 00:40:f4:cf:ba:42, IRQ 18
Feb 6 14:20:01 otest1 kernel: eth0: Identified 8139 chip type 'RTL-8100B/8139D'
Feb 6 14:20:01 otest1 kernel: eth0: link up, 100Mbps, full-duplex, lpa 0x45E1
Feb 6 14:20:01 otest1 kernel: NET: Registered protocol family 17
Feb 6 14:20:01 otest1 kernel: hda: ATAPI 48X DVD-ROM DVD-R CD-R/RW drive, 2048kB Cache
Feb 6 14:20:01 otest1 kernel: Uniform CD-ROM driver Revision: 3.20
Feb 6 14:20:01 otest1 kernel: st: Version 20040318, fixed bufsize 32768, s/g segs 256
Feb 6 14:20:01 otest1 kernel: Attached scsi generic sg0 at scsi1, channel 0, id 0, lun 0, type 0
Feb 6 14:20:01 otest1 kernel: BIOS EDD facility v0.16 2004-Jun-25, 1 devices found
Feb 6 14:20:01 otest1 kernel: IA-32 Microcode Update Driver: v1.13 <tigran@veritas.com>
Feb 6 14:20:01 otest1 kernel: microcode: No suitable data for cpu 1
Feb 6 14:20:01 otest1 kernel: microcode: No suitable data for cpu 0
Feb 6 14:20:01 otest1 kernel: IA-32 Microcode Update Driver v1.13 unregistered
Feb 6 14:20:01 otest1 kernel: NET: Registered protocol family 10
Feb 6 14:20:01 otest1 kernel: IPv6 over IPv4 tunneling driver
Feb 6 14:20:01 otest1 sshd[5964]: Server listening on :: port 22.
Feb 6 14:20:01 otest1 kernel: ACPI: Power Button (FF) [PWRF]
Feb 6 14:20:02 otest1 kernel: ACPI: Processor [CPU0] (supports C1, 8 throttling states)
Feb 6 14:20:02 otest1 kernel: ACPI: Processor [CPU1] (supports C1, 8 throttling states)
Feb 6 14:20:02 otest1 rcpowersaved: enter 'speedstep-centrino' into POWERSAVE_CPUFREQD_MODULE in /etc/sysconfig/powersave/cpufreq.
Feb 6 14:20:02 otest1 rcpowersaved: this will speed up starting powersaved and avoid unnecessary warnings in syslog.
Feb 6 14:20:02 otest1 slapd[6005]: @(#) $OpenLDAP: slapd 2.2.24 (Nov 17 2005 20:57:08) $ abuild@levi:/usr/src/packages/BUILD/openldap-2.2.24/servers/slapd
Feb 6 14:20:02 otest1 [powersaved][6032]: resmgr: server response code 200
Feb 6 14:20:03 otest1 kernel: parport0: PC-style at 0x378 (0x778) [PCSPP,TRISTATE]
Feb 6 14:20:03 otest1 kernel: parport0: irq 7 detected
Feb 6 14:20:03 otest1 kernel: lp0: using parport0 (polling).
Feb 6 14:20:04 otest1 kernel: drivers/usb/serial/usb-serial.c: USB Serial support registered for Generic
Feb 6 14:20:04 otest1 kernel: usbcore: registered new driver usbserial
Feb 6 14:20:04 otest1 kernel: drivers/usb/serial/usb-serial.c: USB Serial Driver core v2.0
Feb 6 14:20:05 otest1 smbd[6317]: [2008/02/06 14:20:05, 0] printing/print_cups.c:cups_cache_reload(85)
Feb 6 14:20:05 otest1 smbd[6317]: Unable to connect to CUPS server localhost - Connection refused
Feb 6 14:20:05 otest1 smbd[6317]: [2008/02/06 14:20:05, 0] printing/print_cups.c:cups_cache_reload(85)
Feb 6 14:20:05 otest1 smbd[6317]: Unable to connect to CUPS server localhost - Connection refused
Feb 6 14:20:06 otest1 ifup: No configuration found for sit0
Feb 6 14:20:07 otest1 /usr/sbin/cron[6654]: (CRON) STARTUP (fork ok)
Feb 6 14:20:08 otest1 nscd: 6656 cannot create /var/run/nscd/passwd; no persistent database used
Feb 6 14:20:08 otest1 nscd: 6656 cannot create /var/run/nscd/group; no persistent database used
Feb 6 14:20:08 otest1 xinetd[6667]: Reading included configuration file: /etc/xinetd.d/chargen [file=/etc/xinetd.conf] [line=26]
Feb 6 14:20:08 otest1 xinetd[6667]: Reading included configuration file: /etc/xinetd.d/chargen-udp [file=/etc/xinetd.d/chargen-udp] [line=13]
Feb 6 14:20:08 otest1 xinetd[6667]: Reading included configuration file: /etc/xinetd.d/cups-lpd [file=/etc/xinetd.d/cups-lpd] [line=14]
Feb 6 14:20:08 otest1 xinetd[6667]: Reading included configuration file: /etc/xinetd.d/daytime [file=/etc/xinetd.d/daytime] [line=11]
Feb 6 14:20:08 otest1 xinetd[6667]: Reading included configuration file: /etc/xinetd.d/daytime-udp [file=/etc/xinetd.d/daytime-udp] [line=13]
Feb 6 14:20:08 otest1 xinetd[6667]: Reading included configuration file: /etc/xinetd.d/echo [file=/etc/xinetd.d/echo] [line=14]
Feb 6 14:20:08 otest1 xinetd[6667]: Reading included configuration file: /etc/xinetd.d/echo-udp [file=/etc/xinetd.d/echo-udp] [line=13]
Feb 6 14:20:08 otest1 xinetd[6667]: Reading included configuration file: /etc/xinetd.d/netstat [file=/etc/xinetd.d/netstat] [line=14]
Feb 6 14:20:08 otest1 xinetd[6667]: Reading included configuration file: /etc/xinetd.d/rsync [file=/etc/xinetd.d/rsync] [line=16]
Feb 6 14:20:08 otest1 kernel: Non-volatile memory driver v1.2
Feb 6 14:20:08 otest1 xinetd[6667]: Reading included configuration file: /etc/xinetd.d/servers [file=/etc/xinetd.d/servers] [line=12]
Feb 6 14:20:08 otest1 xinetd[6667]: Reading included configuration file: /etc/xinetd.d/services [file=/etc/xinetd.d/services] [line=13]
Feb 6 14:20:08 otest1 xinetd[6667]: Reading included configuration file: /etc/xinetd.d/swat [file=/etc/xinetd.d/swat] [line=13]
Feb 6 14:20:08 otest1 xinetd[6667]: Reading included configuration file: /etc/xinetd.d/systat [file=/etc/xinetd.d/systat] [line=12]
Feb 6 14:20:08 otest1 xinetd[6667]: Reading included configuration file: /etc/xinetd.d/time [file=/etc/xinetd.d/time] [line=17]
Feb 6 14:20:08 otest1 xinetd[6667]: Reading included configuration file: /etc/xinetd.d/time-udp [file=/etc/xinetd.d/time-udp] [line=14]
Feb 6 14:20:08 otest1 xinetd[6667]: Reading included configuration file: /etc/xinetd.d/vnc [file=/etc/xinetd.d/vnc] [line=14]
Feb 6 14:20:08 otest1 xinetd[6667]: Reading included configuration file: /etc/xinetd.d/vsftpd [file=/etc/xinetd.d/vsftpd] [line=90]
Feb 6 14:20:08 otest1 xinetd[6667]: removing chargen
Feb 6 14:20:08 otest1 xinetd[6667]: removing chargen
Feb 6 14:20:08 otest1 xinetd[6667]: removing printer
Feb 6 14:20:08 otest1 xinetd[6667]: removing daytime
Feb 6 14:20:08 otest1 xinetd[6667]: removing daytime
Feb 6 14:20:08 otest1 xinetd[6667]: removing echo
Feb 6 14:20:08 otest1 xinetd[6667]: removing echo
Feb 6 14:20:08 otest1 xinetd[6667]: removing netstat
Feb 6 14:20:08 otest1 xinetd[6667]: removing rsync
Feb 6 14:20:08 otest1 xinetd[6667]: removing servers
Feb 6 14:20:08 otest1 xinetd[6667]: removing services
Feb 6 14:20:08 otest1 xinetd[6667]: removing swat
Feb 6 14:20:08 otest1 xinetd[6667]: removing systat
Feb 6 14:20:08 otest1 xinetd[6667]: removing time
Feb 6 14:20:08 otest1 xinetd[6667]: removing time
Feb 6 14:20:08 otest1 xinetd[6667]: removing vnc1
Feb 6 14:20:08 otest1 xinetd[6667]: removing vnc2
Feb 6 14:20:08 otest1 xinetd[6667]: removing vnc3
Feb 6 14:20:08 otest1 xinetd[6667]: removing vnchttpd1
Feb 6 14:20:08 otest1 xinetd[6667]: removing vnchttpd2
Feb 6 14:20:08 otest1 xinetd[6667]: removing vnchttpd3
Feb 6 14:20:08 otest1 xinetd[6667]: xinetd Version 2.3.13 started with libwrap loadavg options compiled in.
Feb 6 14:20:08 otest1 xinetd[6667]: Started working: 1 available service
Feb 6 14:20:10 otest1 su: (to oracle) root on /dev/console
Feb 6 14:20:10 otest1 su: pam_unix2: session started for user oracle, service su
Feb 6 14:20:12 otest1 kernel: eth0: no IPv6 routers present
Feb 6 14:20:58 otest1 kdm: :0[6853]: pam_unix2: session started for user root, service xdm
Feb 6 14:21:19 otest1 su: pam_unix2: session finished for user oracle, service su
Feb 6 14:21:19 otest1 su: (to oracle) root on /dev/console
Feb 6 14:21:19 otest1 su: pam_unix2: session started for user oracle, service su
Feb 6 14:21:21 otest1 su: pam_unix2: session finished for user oracle, service su
Feb 6 14:21:21 otest1 su: (to oracle) root on /dev/console
Feb 6 14:21:21 otest1 su: pam_unix2: session started for user oracle, service su
Feb 6 14:22:26 otest1 su: pam_unix2: session finished for user oracle, service su
Feb 6 14:26:52 otest1 sshd[10438]: Accepted keyboard-interactive/pam for oracle from 10.10.66.13 port 3602 ssh2
Feb 6 14:26:53 otest1 kernel: open files rlimit 0 reached for uid 0 pid 10465
Feb 6 14:26:53 otest1 last message repeated 9 times
Feb 6 14:27:13 otest1 sshd[10493]: Accepted keyboard-interactive/pam for root from 10.10.66.13 port 3603 ssh2
Feb 6 14:27:13 otest1 sshd[10493]: subsystem request for sftp
Feb 6 14:27:13 otest1 kernel: printk: 3 messages suppressed.
Feb 6 14:27:13 otest1 kernel: open files rlimit 0 reached for uid 0 pid 10499
Feb 6 14:27:13 otest1 last message repeated 3 times
Feb 6 14:28:01 otest1 sshd[10557]: Accepted keyboard-interactive/pam for root from 10.10.66.7 port 57839 ssh2
Feb 6 14:28:01 otest1 kernel: printk: 5 messages suppressed.
Feb 6 14:28:01 otest1 kernel: open files rlimit 0 reached for uid 0 pid 10573
Feb 6 14:28:01 otest1 last message repeated 8 times
10.10.66.13 - это Windows-машина
10.10.66.7 - это Linux-машина