tlug: Strange entry in /var/log/messages

["Manuel M. T. Chakravarty" <chak@example.com>]

I got a rather strange entry in my /var/log/messages file.

Mar 24 10:00:52 greyarea ftpd[11013]: FTP session closed
Mar 24 19:05:25 greyarea PAM_pwdb[10199]: 1 authentication failure; (uid=0) -> keller for rlogin service
Mar 24 11:31:09 greyarea ftpd[11165]: ANONYMOUS FTP LOGIN FROM kadri.ut.ee [193.40.5.94], Squid@

The interesting one, is the second one:

(a) It's time is out of sync with the preceding and following
    entry.
(b) How can root (uid=0) have an authentication failure?
(c) The user `keller' was yesterday at 19:05 definitely not at 
    her computer...

Maybe (c) is a consequence of (a).

Any ideas?

Cheers,

Manuel

PS: This is on a TL3.0j system with a 2.0.36 kernel.
-------------------------------------------------------------------
Next Technical Meeting: April 10 (Sat), 12:30   place: Temple Univ.
*** featuring: LabView and UDB/DB2 for Linux
Next Nomikai: May 21 (Fri), 19:30    Tengu TokyoEkiMae 03-3275-3691
-------------------------------------------------------------------
more info: http://www.tlug.gr.jp        Sponsor: Global Online Japan