RE: How to configure OpenSSH logging
From: Ramos, Anthony T, SOLCM (atramos_at_att.com)
Date: 04/30/03
- Previous message: Michael Martinez: "sftplogging.sourceforge.net"
- Maybe in reply to: Nguyen, David M: "How to configure OpenSSH logging"
- Next in thread: Koenig, Jeff: "RE: How to configure OpenSSH logging"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 30 Apr 2003 12:36:18 -0500 To: "Max Gregis" <mgregis@sorint.it>, "Nguyen, David M" <david.m.nguyen@xo.com>
Is there a particular startup mode or switch necessary to make this
logging take affect? I don't know about David, but I get no results
with this(?)...
(sshd_config)
# Logging
#obsoletes QuietMode and FascistLogging
SyslogFacility USER
LogLevel DEBUG
(syslog.conf)
user.debug /var/adm/sshlog
PS: I've restarted both ssh and syslog daemons of course...
Thanks,
Anthony
-----Original Message-----
From: Max Gregis [mailto:mgregis@sorint.it]
Sent: Wednesday, April 30, 2003 5:15 AM
To: Nguyen, David M
Cc: secureshell@securityfocus.com
Subject: Re: How to configure OpenSSH logging
Hi David,
in your sshd_config file, try to set these directives:
#obsoletes QuietMode and FascistLogging
SyslogFacility AUTH
LogLevel INFO
Increase your logging level with "DEBUG" in Loglevel directive.
Create a specific ssh logfile:
touch /var/adm/sshlog
In your /etc/syslog.conf , put in this entry:
auth.debug /var/adm/sshlog
Stop e restart syslog service.
Check your new logfile
Max
Tuesday, April 29, 2003, 7:56:39 PM, you wrote:
NDM> How do I set up logging to log every logging attempts from users?
I use
NDM> OpenSSH.
NDM> Thanks,
NDM> David
- Previous message: Michael Martinez: "sftplogging.sourceforge.net"
- Maybe in reply to: Nguyen, David M: "How to configure OpenSSH logging"
- Next in thread: Koenig, Jeff: "RE: How to configure OpenSSH logging"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
