From owner-freebsd-questions Wed Apr 26 10:56:52 2000 Delivered-To: freebsd-questions@freebsd.org Received: from pima.gate.net (pima.gate.net [216.219.246.30]) by hub.freebsd.org (Postfix) with ESMTP id BD16937B7E0 for ; Wed, 26 Apr 2000 10:56:48 -0700 (PDT) (envelope-from wjm@gate.net) Received: from inca.gate.net (wjm@inca.gate.net [199.227.0.11]) by pima.gate.net (8.9.3/8.9.3) with ESMTP id NAA113176; Wed, 26 Apr 2000 13:31:25 -0400 Received: from localhost (wjm@localhost) by inca.gate.net (8.8.6/8.6.9) with ESMTP id NAA36338; Wed, 26 Apr 2000 13:58:22 -0400 X-Authentication-Warning: inca.gate.net: wjm owned process doing -bs Date: Wed, 26 Apr 2000 13:58:21 -0400 (EDT) From: William Melanson To: Barnett Hsu Cc: freebsd-questions@FreeBSD.ORG Subject: Re: su isn't logging via syslog In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Wed, 26 Apr 2000, Barnett Hsu wrote: % It is my understanding that su logs via the syslog % auth and authpriv facilities. However, I've tried % auth.*, authpriv.*, auth.info, and auth.notice in % syslog.conf on some FreeBSD systems (ranging from % version 2.2 through 4.0) and su attempts don't % show up in the log, even if the attempt was % unsuccessful. su attempts don't show up when I % tried *.* as well. % % What could be the problem? % This is how I've set syslog.conf: *.err;kern.debug;auth.notice;mail.crit /var/log/stdout.log *.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages mail.info /var/log/maillog auth.info /var/log/auth.log ftp.info /var/log/ftp.log All info regarding su gets written to /var/log/auth.log. I think this file requires tab key seperators as well. --------------------------------oOo------------------------------------ William J. Melanson CyberGate, Inc. | e.spire Communications Sr Network Controller www.gate.net ---- www.espire.net Network Operations Center Phone: (954) 334-8080 finger wjm@gate.net PGP public key --------------------------------oOo------------------------------------ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message