Authentication errors in TrueNAS Scale alerts

dalnew

Dabbler
Joined
Dec 9, 2020
Messages
26
Hey I've recently been seeing a fair number of alerts in TrueNAS that seemed to indicate ssh authentication failures. Originally I though, oh crap someone is trying to hack my system, but then when I took a look at /var/log/auth.log I realized it's just parsing failures out of that log, that in fact aren't really failures, but just incidences of me using sudo and not a password failure.

The alert from TrueNAS:

4 SSH login failures: Feb 18 07:20:30 TestBox sudo[1133794]: pam_krb5(sudo:auth): (user test) parse_name failed: Configuration file does not specify default realm Feb 18 07:20:30 TestBox sudo[1133794]: pam_krb5(sudo:auth): authentication failure; logname=test uid=1000 euid=0 tty=/dev/pts/0 ruser=test rhost= Feb 18 14:18:12 TestBox sudo[1811349]: pam_krb5(sudo:auth): (user test) parse_name failed: Configuration file does not specify default realm Feb 18 14:18:12 TestBox sudo[1811349]: pam_krb5(sudo:auth): authentication failure; logname=test uid=1000 euid=0 tty=/dev/pts/0 ruser=test rhost=
2021-02-19 00:00:43 (America/Los_Angeles)


And here is one of the corresponding instances of me using sudo to look at the auth log, hilariously generating another auth failure log :)
Feb 18 07:20:30 TestBox sudo[3893343]: pam_krb5(sudo:auth): (user test) parse_name failed: Configuration file does not specify default realm
Feb 18 07:20:30 TestBox sudo[3893343]: pam_krb5(sudo:auth): authentication failure; logname=test uid=1000 euid=0 tty=/dev/pts/2 ruser=test rhost=
Feb 18 07:20:41 TestBox sudo[3894541]: test : TTY=pts/0 ; PWD=/ ; USER=root ; COMMAND=/bin/vim /var/log/auth.log

At first glance it seems innocuous as I know there's no actual auth failure when I run these commands.... it just seems to be related to that "parse_name failed: Configuration file does not specify default realm". Does anyone have any suggestions on the right way to fix and/or silence these? It's always a bit disconcerting to see loads of authentication failures reported every day.
 
Top