Re: double log entries ?

On 2007-05-07, david <david@xxxxxxxxxxxxxxxxxxxxxxxx> wrote:
Any idea why there's a GMT =0 and a GMT -7 entry into the log file for each
connection?

May 7 21:04:22 hostname sshd[7055]: Accepted publickey for blah from
::ffff:00.00.13.250 port 1218 ssh2
May 7 14:04:22 hostname sshd[7054]: Accepted publickey for blah from
::ffff:00.00.13.250 port 1218 ssh2

Looks like OpenSSH, but you should specify.

One message is from the privsep master sshd and the other (the GMT+0
one) is from the privsep slave. You only see it when you have a
/dev/log inside the chroot or you're logging to stderr (eg if you're
running it under daemontools).

This only applies to older versions, it has been fixed since (I think)
4.3.

--
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
.

Relevant Pages