System Shutdown with Session ID 4294967295 or 'unset'
Issue
- When tracking down the user that shutdown the system the id shows as:
- A high session id value
- An
unsetid value
In the audit.log, which cannot be traced back to any user.
Environment
- Red Hat Enterprise Linux 4
- Red Hat Enterprise Linux 5
- Red Hat Enterprise Linux 6
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
