RE: How to configure OpenSSH logging

Is there a particular startup mode or switch necessary to make this logging take affect? I don't know about David, but I get no results with this(?)...

(sshd_config)

# Logging
#obsoletes QuietMode and FascistLogging
SyslogFacility USER
LogLevel DEBUG

(syslog.conf)

user.debug /var/adm/sshlog

PS: I've restarted both ssh and syslog daemons of course...

Thanks,
Anthony

-----Original Message-----
From: Max Gregis [mailto:mgregis@sorint.it] Sent: Wednesday, April 30, 2003 5:15 AM
To: Nguyen, David M
Cc: secureshell@securityfocus.com
Subject: Re: How to configure OpenSSH logging

Hi David,

in your sshd_config file, try to set these directives:

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

#obsoletes QuietMode and FascistLogging
SyslogFacility AUTH
LogLevel INFO

Increase your logging level with "DEBUG" in Loglevel directive.

Create a specific ssh logfile:
touch /var/adm/sshlog

In your /etc/syslog.conf , put in this entry:

auth.debug                 /var/adm/sshlog

Stop e restart syslog service.

Check your new logfile

Max

Tuesday, April 29, 2003, 7:56:39 PM, you wrote:

Do you need more help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

NDM> How do I set up logging to log every logging attempts from users? I use
NDM> OpenSSH.

NDM> Thanks,
NDM> David Received on Wed Apr 30 14:07:48 2003