Re: How to configure OpenSSH logging

Hi David,

in your sshd_config file, try to set these directives:

#obsoletes QuietMode and FascistLogging
SyslogFacility AUTH
LogLevel INFO

Increase your logging level with "DEBUG" in Loglevel directive.

Create a specific ssh logfile:
touch /var/adm/sshlog

In your /etc/syslog.conf , put in this entry:

auth.debug                 /var/adm/sshlog

Stop e restart syslog service.

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

Check your new logfile

Max

Tuesday, April 29, 2003, 7:56:39 PM, you wrote:

NDM> How do I set up logging to log every logging attempts from users? I use NDM> OpenSSH.

NDM> Thanks,
NDM> David Received on Wed Apr 30 12:24:51 2003