From owner-freebsd-security Tue Jan 15 8:56:47 2002 Delivered-To: freebsd-security@freebsd.org Received: from crimelords.org (crimelords.org [199.233.213.8]) by hub.freebsd.org (Postfix) with ESMTP id 10CB237B400 for ; Tue, 15 Jan 2002 08:56:44 -0800 (PST) Received: from localhost (admin@localhost) by crimelords.org (8.11.6/8.11.6) with ESMTP id g0FGnNp94494 for ; Tue, 15 Jan 2002 10:49:23 -0600 (CST) (envelope-from admin@crimelords.org) Date: Tue, 15 Jan 2002 10:49:23 -0600 (CST) From: admin To: freebsd-security@FreeBSD.ORG Subject: Logging ssh?? Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org I'm trying to get failed log-in attempts setup to go to my syslog or messages file (/var/log) and have had zero success. Openssh 2.9 on freeBSD4.4 stable I must be missing something in the syslog.conf, so i put in the line *.*,cron.none /var/log/syslog no spaces, only tabs...then 'touch /var/log/syslog' I then tail the syslog file and fail to log in from 3 sources outside and see nothing. sshd_config loggin settings have been from default of # Logging SyslogFacility AUTH LogLevel INFO I then tried: # Logging SyslogFacility AUTH LogLevel VERBOSE I then tried: # Logging SyslogFacility AUTH LogLevel DEBUG Not sure what it is i'm missing. I've HUP'ed every service, and read what I could, but it sitll fails to log. Is this not a feature? or am I just missing something simple? --emacs To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message