From owner-freebsd-questions@FreeBSD.ORG  Tue Aug 17 15:09:36 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8B6BC16A4CE
	for <freebsd-questions@freebsd.org>;
	Tue, 17 Aug 2004 15:09:36 +0000 (GMT)
Received: from redtick.homeunix.com (adsl-68-89-249-225.dsl.okcyok.swbell.net
	[68.89.249.225])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2483043D31
	for <freebsd-questions@freebsd.org>;
	Tue, 17 Aug 2004 15:09:36 +0000 (GMT)
	(envelope-from boxend@redtick.homeunix.com)
Received: from redtick.homeunix.com (localhost.homeunix.com [127.0.0.1])
	i7HF83Hi018960	for <freebsd-questions@freebsd.org>;
	Tue, 17 Aug 2004 10:08:03 -0500 (CDT)
	(envelope-from boxend@redtick.homeunix.com)
Received: (from boxend@localhost)
	by redtick.homeunix.com (8.12.10/8.12.10/Submit) id i7HF832Z018959
	for freebsd-questions@freebsd.org;
	Tue, 17 Aug 2004 10:08:03 -0500 (CDT)	(envelope-from boxend)
Date: Tue, 17 Aug 2004 10:08:03 -0500 (CDT)
From: Mark <boxend@redtick.homeunix.com>
Message-Id: <200408171508.i7HF832Z018959@redtick.homeunix.com>
To: freebsd-questions@freebsd.org
Subject: logins
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Aug 2004 15:09:36 -0000

I've beend getting the sshd login attempts, like everyone else so I've been 
watching the logs close, this is the first time to see this item in /var/log/messages. 
Aug 14 04:15:00 chillico su: _secure_path: /nonexistent/.login_conf is not owned by uid 65534
I've looked in the passwd file and groups, there is not a uid of 65534 listed.
I installed rsync last week to backup some windows computers during the weekend, this would have been
during one of the backups, but the other five would have triggered the same msg, just thinking outloud here.

Any idea what would have made this entry??