suspicious: after reboot I get a request: Authentication required to run /bin/sh as the superuser

[ubuntu at howorth.org.uk]

robert at redcor.ch wrote:
> Thanks
> On 28.04.22 19:06, ubuntu at howorth.org.uk wrote:
> > joeywpg at shaw.ca wrote:  
> >> What happens if you enter the wrong pw 3 times or cancel/close the
> >> request? Can you still run your other apps?
> >>
> >> On 2022-04-28 02:17, robert rottermann wrote:  
> >>> Hi there
> >>>
> >>> for some times now, I get a request to authenticate as "super
> >>> user" each time I login:  
> > When you say login do you mean starting a graphical session?  
> 
> starting a graphical session.
> 
> it takes some 15 sec, till that prompt shows up.
> 
> >
> > What about if you su to another user and then su back to yourself?
> > If the problem/oddity occurs when using su then you could try using
> > strace to see what gets run.  
> 
> I can login from an other system.

OK, but what happens when you login from another system? And what do
you mean by 'login from another system' - ssh or what? Does the prompt
show up? Where? You need to be more explicit because we aren't mind
readers.

> How would I uses strace to learn what process is asking for input.

You would strace whatever process you run that causes the prompt to
eventually appear. Then look through the log until you find either
whatever causes the prompt to appear or some sub-process that appears
to be a likely source. If the latter, then strace the subprocess.
Repeat until you identify the cause.

> I googled for an answer to this question, but I am lost in strace's
> options

You probably won't need any options. Just redirect the mountains of
output into a file so you can examine it.

> thanks
> 
> Robert
> 
> >  
> >>> Authentication required to run /bin/sh as the superuser
> >>>
> >>> how can I check what causes that request?
> >>>
> >>> in ~/.bashrc and /etc/profile.d find nothing obvious.
> >>>
> >>>
> >>> thanks
> >>>
> >>> robert