hello,

on our third node there are lots of messages like the following in /var/log/messages:
Code:
Mar  9 15:45:01 clu03 kernel: audit(1331304301.745:17352): user pid=3350 uid=0 auid=4294967295 msg='PAM: setcred acct=root : exe="/usr/sbin/cron" (hostnam
e=?, addr=?, terminal=cron res=success)'
Mar  9 15:45:01 clu03 kernel: audit(1331304301.745:17353): user pid=3350 uid=0 auid=4294967295 msg='PAM: session close acct=root : exe="/usr/sbin/cron" (h
ostname=?, addr=?, terminal=cron res=success)'
Mar  9 15:48:27 clu03 sshd[31388]: Received disconnect from 192.168.186.33: 11: disconnected by user
Mar  9 15:48:27 clu03 kernel: audit(1331304507.914:17354): user pid=31388 uid=0 auid=0 msg='PAM: session close acct=root : exe="/usr/sbin/sshd" (hostname=
mymachine.here.com, addr=192.168.186.33, terminal=ssh res=success)'
Mar  9 15:48:27 clu03 kernel: audit(1331304507.914:17355): user pid=31388 uid=0 auid=0 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=mymachine.here.com, addr=192.168.186.33, terminal=ssh res=success)'
Mar  9 15:48:58 clu03 kernel: audit(1331304538.098:17356): user pid=5861 uid=0 auid=4294967295 msg='acct="root": exe="/usr/sbin/sshd" (hostname=?, addr=19
2.168.75.7, terminal=sshd res=failed)'
Any ideas on that?