Somebody in the thread at some point said: > Sep 13 11:21:55 server pam_timestamp_check: PAM `/var/run/' permissions are lax ll -d /var/run ... mine looks like # ll -d /var/run drwxr-xr-x 22 root root 4096 2007-09-13 04:28 /var/run > Sep 13 11:22:30 server last message repeated 5 times > Sep 13 11:22:51 server last message repeated 3 times > Sep 13 11:22:52 server sshd[24997]: Connection closed by UNKNOWN I wonder if solving the one problem will solve the other. It appears sshd can blow chunks and terminate connections like this. -Andy
