Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 11 Jan 2000 23:33:46 -0500 (EST)
From:      "Crist J. Clark" <cjc@cc942873-a.ewndsr1.nj.home.com>
To:        awells@journalstar.com (Tony Wells)
Cc:        su98-rin@nada.kth.se (Richard Nyberg), freebsd-questions@FreeBSD.ORG
Subject:   Re: sshd and syslogd
Message-ID:  <200001120433.XAA09576@cc942873-a.ewndsr1.nj.home.com>
In-Reply-To: <387B7288.8A5D24F5@journalstar.com> from Tony Wells at "Jan 11, 2000 12:12:24 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
Tony Wells wrote,
> I tried what you suggested, but still don't see messages from sshd in
> /var/log/authlog; I still see login failures from telnet in
> /var/log/messages.  I rebooted the machine after I made the changes just
> to make sure everybody read the changed config files.
> Could I have a conflict in syslog.conf?  The contents of syslog.conf are
> listed below:
> 
> # $FreeBSD: src/etc/syslog.conf,v 1.9.2.1 1999/08/29 14:19:02 peter Exp
> $
> #
> #       Spaces are NOT valid field separators in this file.
> #       Consult the syslog.conf(5) manpage.
> *.err;kern.debug;auth.notice;mail.crit          /dev/console
> *.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages
> mail.info                                       /var/log/maillog
> lpr.info                                        /var/log/lpd-errs
> cron.*                                          /var/cron/log
> *.err                                           root
> *.notice;news.err                               root
> *.alert                                         root
> *.emerg                                         *
> # uncomment these if you're running inn
> # news.crit                                     /var/log/news/news.crit
> # news.err                                      /var/log/news/news.err
> # news.notice                                  
> /var/log/news/news.notice
> !startslip
> *.*                                             /var/log/slip.log
> !ppp
> *.*                                             /var/log/ppp.log
> auth.*                                          /var/log/authlog

The way you have it set up, only AUTH messages from ppp will end up in
/var/log/authlog.
-- 
Crist J. Clark                           cjclark@home.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200001120433.XAA09576>