pam_authenticate failed

[bernholdt]

Hi guys
Can anyone explain this to me ? Im have OSSEC running and today i got this warning
Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system."
Portion of the log(s):

Jan 19 17:21:22 >>servername<< saslauthd[4411]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module

The log shows this but i have no idea what causes this error
Jan 19 17:21:22 x-unit1 saslauthd[4410]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
Jan 19 17:21:22 >>servername<< saslauthd[4411]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module
Jan 19 17:21:22 >>servername<< saslauthd[4411]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]

I think it could be something with smtpd but im not sure I just reinstalled my server this weekend so it should be 100% clean from spyware etc etc

[till]

This means that you tried to login with sasl (smtp) without specifying a username. This is most likely not related to spyware or viruses. Just make sure that you specify a username when you try to login with smtp auth.