Re: no sshd log exists

At 11:46 AM -0800 2/28/06, spcatch55 wrote:
I want to see a log of all users that log in via ssh,
yet the /var/log/sshd.log file does not exist. This
is on a Debian Linux (knoppix 3.4).

/etc/ssh/sshd_config contains this:
SyslogFacility AUTH
LogLevel INFO

Any ideas of where my configuration is wrong?

You need to check your /etc/syslog.conf file (or equivalent), and
see where it is sending 'auth.log' records. if you have a line
such as:

auth.info;authpriv.info /var/log/auth.log

then you may have to create /var/log/auth.log and send a -HUP
signal to the syslogd daemon to get it to re-read the config
file, and notice that the file now exists. I believe that most
syslogd's require that the file already exist before they will
write any log records to them.

Note that you will probably want special permissions on that
log file, and that you'll want to make sure some process is
periodically checking the file and rotating it if necessary.

--
Garance Alistair Drosehn = gad@xxxxxxxxxxxxxxxxxxxx
Senior Systems Programmer or gad@xxxxxxxxxxx
Rensselaer Polytechnic Institute or drosih@xxxxxxx