[问题求助]系统中出现大量in.auth进程，而且占用大量系统资源。 [复制链接]

top - 13:43:50 up .18 days,  8:58, 27 users,  load average: 8.27, 7.64, 5..33(广告)
Tasks: 362 total,  11 running, 351 sleeping,   0 stopped,   0. z.ombie              乙肝
Cpu(s.).:  0.6% us,  0.7% sy,  0..3% ni,  7.8% id,  0.4% wa,  0.1% hi, 90.1% si虚拟主机
Mem:   3806508k total,  3424548k used,   381960k .fre.e,   153968k buffers            杀毒
Swap:  4194296k total,   .   4.96k used,  4193800k free,  2196928k cached.

  PID USER      PR  NI  VIRT  RES  SHR S %C.PU %MEM    T.IME+  COMMAND                                                       .             女人
32532 ident     24   0.  6320  784  664 R 55.7  0.0   0:06.27 in.au.thd                                                 .       .
32508 ident     23   0  6320  .784  664 R 52.2  0.0   0:07.02 in.authd       .     .                                            学习
32601 ident     .21   0  6320  784  664 R 47.1  0.0   0:03.70 in.auth.d          .                                              --- 印刷
32393 ident     20   0  6320  784  664 R 4.6.1  0.0   0:11.25 in.authd                                                .      .             鲜花
32539 ident     22   0  6320  784  664 R 44..2  0.0   0:05.89 in.authd                              .    .                      .
32478 ident     21   0  6320  784  664 R 32..1  0.0   0:08.68 in.authd                         ..                               <性病>
326.95 ident     22   0  63.20  780  660 R 16.9  0.0   0:00.53 in.authd                                            .                         电子
32693 ident     20   0  6.320  780  660 R 15.6  0.0.   0:00.49 in.authd域名
10139 server  .  17  . 2  642m 293m  10m S  2.2  7.9  79:39.31 java                                                           . .
6880 root      15   0    . 0    0    0 S  .0.3  0.0  15:13.05 kjournald域名

********************.****教育
系统版本：
Red Hat Enterprise Linux AS release .4 (Nahant Update .2).
Linux version 2..6.9-22.EL    美容

/proc/25948/  
这些目录是我再去找的时候都没有找到啊，是不是这个是临时的

lz 最近是不是改过 /目录的权限?

抓住现场了啊~~~
ond:/home/check>lsof -p 25948
COMMAND    PID  USER   FD      TYPE DEVICE SIZE NODE NAME
in.authd 25948 ident  cwd   unknown                  /proc/25948/cwd (readlink: Permission denied)
in.authd 25948 ident  rtd   unknown                  /proc/25948/root (readlink: Permission denied)
in.authd 25948 ident  txt   unknown                  /proc/25948/exe (readlink: Permission denied)
in.authd 25948 ident NOFD                            /proc/25948/fd (opendir: Permission denied)


ond:/home/check>lsof -p 26939              
COMMAND    PID  USER   FD      TYPE DEVICE SIZE NODE NAME
in.authd 26939 ident  cwd   unknown                  /proc/26939/cwd (readlink: Permission denied)
in.authd 26939 ident  rtd   unknown                  /proc/26939/root (readlink: Permission denied)
in.authd 26939 ident  txt   unknown                  /proc/26939/exe (readlink: Permission denied)
in.authd 26939 ident NOFD                            /proc/26939/fd (opendir: Permission denied)

现在又没有出现了，晕死 。先要谢谢楼上两位的解答。

看看到底在干什么。

pstree -auhpl |grep in.authd

lsof -p 32532(进程号)
看看它到底在干什么

in.authd
于pam模块有关系的 你ps看看进程的信息

自己占个沙发先吧