Jan 27 20:24:18 prd-ubuntu2204-docker-4c-4g-5071 passwd[688]: password for 'ubuntu' changed by 'root'
Jan 27 20:24:18 prd-ubuntu2204-docker-4c-4g-5071 sshd[763]: Server listening on 0.0.0.0 port 22.
Jan 27 20:24:18 prd-ubuntu2204-docker-4c-4g-5071 sshd[763]: Server listening on :: port 22.
Jan 27 20:24:18 prd-ubuntu2204-docker-4c-4g-5071 systemd-logind[719]: New seat seat0.
Jan 27 20:24:18 prd-ubuntu2204-docker-4c-4g-5071 systemd-logind[719]: Watching system buttons on /dev/input/event0 (Power Button)
Jan 27 20:24:18 prd-ubuntu2204-docker-4c-4g-5071 systemd-logind[719]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Jan 27 20:24:21 prd-ubuntu2204-docker-4c-4g-5071 sshd[954]: error: kex_exchange_identification: Connection closed by remote host
Jan 27 20:24:21 prd-ubuntu2204-docker-4c-4g-5071 sshd[954]: Connection closed by 10.30.168.15 port 58246
Jan 27 20:24:28 prd-ubuntu2204-docker-4c-4g-5071 sshd[972]: Invalid user jenkins from 10.30.168.15 port 58252
Jan 27 20:24:28 prd-ubuntu2204-docker-4c-4g-5071 sshd[972]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Jan 27 20:24:28 prd-ubuntu2204-docker-4c-4g-5071 sshd[972]: Received disconnect from 10.30.168.15 port 58252:11: Closed due to user request. [preauth]
Jan 27 20:24:28 prd-ubuntu2204-docker-4c-4g-5071 sshd[972]: Disconnected from invalid user jenkins 10.30.168.15 port 58252 [preauth]
Jan 27 20:24:31 prd-ubuntu2204-docker-4c-4g-5071 sshd[974]: Invalid user jenkins from 10.30.168.15 port 58256
Jan 27 20:24:31 prd-ubuntu2204-docker-4c-4g-5071 sshd[974]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Jan 27 20:24:31 prd-ubuntu2204-docker-4c-4g-5071 sshd[974]: Received disconnect from 10.30.168.15 port 58256:11: Closed due to user request. [preauth]
Jan 27 20:24:31 prd-ubuntu2204-docker-4c-4g-5071 sshd[974]: Disconnected from invalid user jenkins 10.30.168.15 port 58256 [preauth]
Jan 27 20:24:34 prd-ubuntu2204-docker-4c-4g-5071 sshd[976]: Invalid user jenkins from 10.30.168.15 port 58258
Jan 27 20:24:34 prd-ubuntu2204-docker-4c-4g-5071 sshd[976]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Jan 27 20:24:34 prd-ubuntu2204-docker-4c-4g-5071 sshd[976]: Received disconnect from 10.30.168.15 port 58258:11: Closed due to user request. [preauth]
Jan 27 20:24:34 prd-ubuntu2204-docker-4c-4g-5071 sshd[976]: Disconnected from invalid user jenkins 10.30.168.15 port 58258 [preauth]
Jan 27 20:24:38 prd-ubuntu2204-docker-4c-4g-5071 sshd[1205]: Invalid user jenkins from 10.30.168.15 port 58260
Jan 27 20:24:38 prd-ubuntu2204-docker-4c-4g-5071 sshd[1205]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Jan 27 20:24:38 prd-ubuntu2204-docker-4c-4g-5071 sshd[1205]: Received disconnect from 10.30.168.15 port 58260:11: Closed due to user request. [preauth]
Jan 27 20:24:38 prd-ubuntu2204-docker-4c-4g-5071 sshd[1205]: Disconnected from invalid user jenkins 10.30.168.15 port 58260 [preauth]
Jan 27 20:24:40 prd-ubuntu2204-docker-4c-4g-5071 sshd[1317]: Invalid user jenkins from 10.30.168.15 port 58264
Jan 27 20:24:40 prd-ubuntu2204-docker-4c-4g-5071 sshd[1317]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Jan 27 20:24:40 prd-ubuntu2204-docker-4c-4g-5071 sshd[1317]: Received disconnect from 10.30.168.15 port 58264:11: Closed due to user request. [preauth]
Jan 27 20:24:40 prd-ubuntu2204-docker-4c-4g-5071 sshd[1317]: Disconnected from invalid user jenkins 10.30.168.15 port 58264 [preauth]
Jan 27 20:24:43 prd-ubuntu2204-docker-4c-4g-5071 sshd[1323]: Invalid user jenkins from 10.30.168.15 port 58268
Jan 27 20:24:43 prd-ubuntu2204-docker-4c-4g-5071 sshd[1323]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Jan 27 20:24:43 prd-ubuntu2204-docker-4c-4g-5071 sshd[1323]: Received disconnect from 10.30.168.15 port 58268:11: Closed due to user request. [preauth]
Jan 27 20:24:43 prd-ubuntu2204-docker-4c-4g-5071 sshd[1323]: Disconnected from invalid user jenkins 10.30.168.15 port 58268 [preauth]
Jan 27 20:24:46 prd-ubuntu2204-docker-4c-4g-5071 sshd[1325]: Invalid user jenkins from 10.30.168.15 port 58270
Jan 27 20:24:46 prd-ubuntu2204-docker-4c-4g-5071 sshd[1325]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Jan 27 20:24:46 prd-ubuntu2204-docker-4c-4g-5071 sshd[1325]: Received disconnect from 10.30.168.15 port 58270:11: Closed due to user request. [preauth]
Jan 27 20:24:46 prd-ubuntu2204-docker-4c-4g-5071 sshd[1325]: Disconnected from invalid user jenkins 10.30.168.15 port 58270 [preauth]
Jan 27 20:24:47 prd-ubuntu2204-docker-4c-4g-5071 useradd[1354]: new group: name=jenkins, GID=1001
Jan 27 20:24:47 prd-ubuntu2204-docker-4c-4g-5071 useradd[1354]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Jan 27 20:24:47 prd-ubuntu2204-docker-4c-4g-5071 usermod[1363]: add 'jenkins' to group 'docker'
Jan 27 20:24:47 prd-ubuntu2204-docker-4c-4g-5071 usermod[1363]: add 'jenkins' to shadow group 'docker'
Jan 27 20:24:49 prd-ubuntu2204-docker-4c-4g-5071 sshd[1397]: Accepted publickey for jenkins from 10.30.168.15 port 58272 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs
Jan 27 20:24:49 prd-ubuntu2204-docker-4c-4g-5071 sshd[1397]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0)
Jan 27 20:24:49 prd-ubuntu2204-docker-4c-4g-5071 systemd-logind[719]: New session 1 of user jenkins.
Jan 27 20:24:49 prd-ubuntu2204-docker-4c-4g-5071 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0)
Jan 27 20:25:02 prd-ubuntu2204-docker-4c-4g-5071 CRON[1603]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:25:02 prd-ubuntu2204-docker-4c-4g-5071 CRON[1603]: pam_unix(cron:session): session closed for user root
Jan 27 20:26:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[1893]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:26:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[1893]: pam_unix(cron:session): session closed for user root
Jan 27 20:26:05 prd-ubuntu2204-docker-4c-4g-5071 sudo:  jenkins : PWD=/w/workspace/mdsal-maven-merge-14.0.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1
Jan 27 20:26:05 prd-ubuntu2204-docker-4c-4g-5071 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Jan 27 20:26:05 prd-ubuntu2204-docker-4c-4g-5071 sudo: pam_unix(sudo:session): session closed for user root
Jan 27 20:26:05 prd-ubuntu2204-docker-4c-4g-5071 sudo:  jenkins : PWD=/w/workspace/mdsal-maven-merge-14.0.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1
Jan 27 20:26:05 prd-ubuntu2204-docker-4c-4g-5071 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Jan 27 20:26:05 prd-ubuntu2204-docker-4c-4g-5071 sudo: pam_unix(sudo:session): session closed for user root
Jan 27 20:26:05 prd-ubuntu2204-docker-4c-4g-5071 sudo:  jenkins : PWD=/w/workspace/mdsal-maven-merge-14.0.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1
Jan 27 20:26:05 prd-ubuntu2204-docker-4c-4g-5071 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Jan 27 20:26:05 prd-ubuntu2204-docker-4c-4g-5071 sudo: pam_unix(sudo:session): session closed for user root
Jan 27 20:26:05 prd-ubuntu2204-docker-4c-4g-5071 sudo:  jenkins : PWD=/w/workspace/mdsal-maven-merge-14.0.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java
Jan 27 20:26:05 prd-ubuntu2204-docker-4c-4g-5071 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Jan 27 20:26:05 prd-ubuntu2204-docker-4c-4g-5071 sudo: pam_unix(sudo:session): session closed for user root
Jan 27 20:26:05 prd-ubuntu2204-docker-4c-4g-5071 sudo:  jenkins : PWD=/w/workspace/mdsal-maven-merge-14.0.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac
Jan 27 20:26:05 prd-ubuntu2204-docker-4c-4g-5071 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Jan 27 20:26:05 prd-ubuntu2204-docker-4c-4g-5071 sudo: pam_unix(sudo:session): session closed for user root
Jan 27 20:26:05 prd-ubuntu2204-docker-4c-4g-5071 sudo:  jenkins : PWD=/w/workspace/mdsal-maven-merge-14.0.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64
Jan 27 20:26:05 prd-ubuntu2204-docker-4c-4g-5071 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Jan 27 20:26:05 prd-ubuntu2204-docker-4c-4g-5071 sudo: pam_unix(sudo:session): session closed for user root
Jan 27 20:27:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[2020]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:27:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[2020]: pam_unix(cron:session): session closed for user root
Jan 27 20:28:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[2023]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:28:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[2023]: pam_unix(cron:session): session closed for user root
Jan 27 20:29:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[2027]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:29:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[2027]: pam_unix(cron:session): session closed for user root
Jan 27 20:30:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[3331]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:30:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[3331]: pam_unix(cron:session): session closed for user root
Jan 27 20:31:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[4077]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:31:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[4077]: pam_unix(cron:session): session closed for user root
Jan 27 20:32:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[4497]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:32:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[4497]: pam_unix(cron:session): session closed for user root
Jan 27 20:33:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[5551]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:33:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[5551]: pam_unix(cron:session): session closed for user root
Jan 27 20:34:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[6676]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:34:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[6676]: pam_unix(cron:session): session closed for user root
Jan 27 20:35:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[7299]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:35:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[7299]: pam_unix(cron:session): session closed for user root
Jan 27 20:36:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[8241]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:36:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[8241]: pam_unix(cron:session): session closed for user root
Jan 27 20:37:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[9105]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:37:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[9105]: pam_unix(cron:session): session closed for user root
Jan 27 20:38:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[10007]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:38:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[10007]: pam_unix(cron:session): session closed for user root
Jan 27 20:39:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[10607]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:39:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[10607]: pam_unix(cron:session): session closed for user root
Jan 27 20:40:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[11392]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:40:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[11392]: pam_unix(cron:session): session closed for user root
Jan 27 20:41:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[12733]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:41:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[12733]: pam_unix(cron:session): session closed for user root
Jan 27 20:42:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[14126]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:42:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[14126]: pam_unix(cron:session): session closed for user root
Jan 27 20:43:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[15269]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:43:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[15269]: pam_unix(cron:session): session closed for user root
Jan 27 20:44:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[16442]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:44:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[16442]: pam_unix(cron:session): session closed for user root
Jan 27 20:45:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[17563]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:45:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[17563]: pam_unix(cron:session): session closed for user root
Jan 27 20:46:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[18652]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:46:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[18652]: pam_unix(cron:session): session closed for user root
Jan 27 20:47:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[19847]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:47:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[19847]: pam_unix(cron:session): session closed for user root
Jan 27 20:48:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[21100]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:48:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[21100]: pam_unix(cron:session): session closed for user root
Jan 27 20:49:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[22218]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:49:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[22218]: pam_unix(cron:session): session closed for user root
Jan 27 20:50:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[23476]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:50:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[23476]: pam_unix(cron:session): session closed for user root
Jan 27 20:51:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[24547]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:51:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[24547]: pam_unix(cron:session): session closed for user root
Jan 27 20:52:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[25516]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:52:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[25516]: pam_unix(cron:session): session closed for user root
Jan 27 20:53:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[26481]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:53:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[26481]: pam_unix(cron:session): session closed for user root
Jan 27 20:54:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[27520]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:54:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[27520]: pam_unix(cron:session): session closed for user root
Jan 27 20:55:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[28414]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:55:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[28414]: pam_unix(cron:session): session closed for user root
Jan 27 20:56:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[29272]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:56:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[29272]: pam_unix(cron:session): session closed for user root
Jan 27 20:57:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[29281]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:57:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[29281]: pam_unix(cron:session): session closed for user root
Jan 27 20:58:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[29284]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:58:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[29284]: pam_unix(cron:session): session closed for user root
Jan 27 20:59:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[29288]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 20:59:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[29288]: pam_unix(cron:session): session closed for user root
Jan 27 21:00:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[29294]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 21:00:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[29294]: pam_unix(cron:session): session closed for user root
Jan 27 21:01:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[29299]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 21:01:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[29299]: pam_unix(cron:session): session closed for user root
Jan 27 21:02:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[29302]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 21:02:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[29302]: pam_unix(cron:session): session closed for user root
Jan 27 21:03:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[29319]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jan 27 21:03:01 prd-ubuntu2204-docker-4c-4g-5071 CRON[29319]: pam_unix(cron:session): session closed for user root
Jan 27 21:03:40 prd-ubuntu2204-docker-4c-4g-5071 sudo:  jenkins : PWD=/w/workspace/mdsal-maven-merge-14.0.x ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp