Quote Originally Posted by pgnd View Post

Nope, not *sure* at all ... but if it's cron-related & there, I haven't found it yet.

These 'spammy' entries ONLY appear when I ssh into a box remotely.

And, it's happening on all my boxes, so it's consistent, at least ...

If I connect remotely as 'user' (eg, "pgnd"), not 'root', the remote's logs still get the same entries, with just the user changed ...
That seems familiar.

I suspect that it is just the systemd entry on the PAM stack, with perhaps the bug (kwallet_pam messes with sudo) also involved.

It doesn't happen here, mainly because I modified "/etc/ssh/sshd_config", changing
UsePAM yes
back to the openssh default of
#UsePAM no