Date: Thu, 23 Apr 1998 11:50:27 -0700 (PDT) From: Jan Koum <jkb@best.com> To: Gary Schrock <root@eyelab.psy.msu.edu> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: any way to make ssh logins log to messages? Message-ID: <Pine.BSF.3.96.980423114611.2715B-100000@shell6.ba.best.com> In-Reply-To: <199804231712.NAA08084@eyelab.psy.msu.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
Of course. Look at /etc/sshd_config and where it say SyslogFacility, change whatever second word is there to AUTH, then, add the following line to /etc/syslog.conf: auth.* /var/log/authlog make sure to use tabs ("man 5 syslog.conf"). Then do "touch /var/log/authlog", chown it the way you like it, chmod to 640 and restart syslogd (or HUP it -- "man kill"). BTW, why does by default FreeBSD wouldn't have auth.* in it's syslog.conf? Is there a reason for it? Ugh.. this better be asked in -security list. -- Yan P.S. -- Don't use root for eMails. :) Jan Koum jkb@best.com | "Turn up the lights; I don't want www.FreeBSD.org -- The Power to Serve | to go home in the dark." Linux -- Window95 of the Unix world. On Thu, 23 Apr 1998, Gary Schrock wrote: >Is there something I can add to my syslog.conf to make logins via ssh show >up in messages (similar to how logins via telnet behave currently) (most of >my syslog.conf is the default one that ships with freebsd plus a couple of >changes). I've noticed that it will log a root login, but doesn't seem to >log any others, and I haven't gotten around to digging into the source to >find out whether it's actually sending things to syslog just at a level >below what I'm logging, or whether it's not sending anything at all. > >Thanks, > >Gary Schrock >root@eyelab.msu.edu > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.980423114611.2715B-100000>