From owner-freebsd-questions Wed Apr 26 18:22: 9 2000 Delivered-To: freebsd-questions@freebsd.org Received: from pop.idx.com.au (pop.idx.com.au [203.14.30.10]) by hub.freebsd.org (Postfix) with ESMTP id 23E4637B57B for ; Wed, 26 Apr 2000 18:22:05 -0700 (PDT) (envelope-from dannyh@idx.com.au) Received: from freebsd.freebsd.org (tntwc01-3-26.idx.com.au [203.166.3.26]) by pop.idx.com.au (8.9.3/8.9.3) with SMTP id LAA20967; Thu, 27 Apr 2000 11:21:05 +1000 From: Danny To: William Melanson , Barnett Hsu Subject: Re: su isn't logging via syslog Date: Fri, 28 Apr 2000 11:26:20 +1000 X-Mailer: KMail [version 1.0.21] Content-Type: text/plain Cc: freebsd-questions@FreeBSD.ORG References: MIME-Version: 1.0 Message-Id: <00042811265002.00347@freebsd.freebsd.org> Content-Transfer-Encoding: 8bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG /var/log/messages can still the log the "su" On Thu, 27 Apr 2000, William Melanson wrote: > On Wed, 26 Apr 2000, Barnett Hsu wrote: > > % It is my understanding that su logs via the syslog > % auth and authpriv facilities. However, I've tried > % auth.*, authpriv.*, auth.info, and auth.notice in > % syslog.conf on some FreeBSD systems (ranging from > % version 2.2 through 4.0) and su attempts don't > % show up in the log, even if the attempt was > % unsuccessful. su attempts don't show up when I > % tried *.* as well. > % > % What could be the problem? > % > > This is how I've set syslog.conf: > > *.err;kern.debug;auth.notice;mail.crit /var/log/stdout.log > *.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages > mail.info /var/log/maillog > auth.info /var/log/auth.log > ftp.info /var/log/ftp.log > > All info regarding su gets written to /var/log/auth.log. I think this file > requires tab key seperators as well. > > > --------------------------------oOo------------------------------------ > William J. Melanson CyberGate, Inc. | e.spire Communications > Sr Network Controller www.gate.net ---- www.espire.net > Network Operations Center Phone: (954) 334-8080 > finger wjm@gate.net PGP public key > --------------------------------oOo------------------------------------ > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message -- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message