Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 7 Dec 2000 12:15:48 +0000
From:      "Neil Long" <neil.long@computing-services.oxford.ac.uk>
To:        freebsd-questions@freebsd.org
Subject:   Re: Can no longer ssh
Message-ID:  <1001207121548.ZM11043@ratbert.oucs.ox.ac.uk>
In-Reply-To: Jim Freeze <jim@freeze.org> "Re: Can no longer ssh" (Dec  7,  6:56am)
References:  <Pine.BSF.4.21.0012070655100.40765-100000@www.bellnetworks.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Dec 7,  6:56am, Jim Freeze wrote:
> Subject: Re: Can no longer ssh
> On Thu, 7 Dec 2000, Edwin Groothuis wrote:
> 
> > /var/log/security I think you should look at.
> 
> There is no /var/log/security.
> 

Hi

I just noted that on a 4-STABLE box (well as of a week ago) that 
the OpenSSH sshd_config uses auth.notice and that this is not sent
anywhere other than the console (not even sure about that without
going to the box to check) so you need to edit /etc/syslog.conf and
do something like
security.*;auth.info                            /var/log/security
(note no whitespace other than tabs)
as root 'touch /var/log/security' and send the syslogd process a HUP

you should then see syslog events related to sshd in /var/log/security.

Neil

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 Dr Neil J Long, Computing Services, University of Oxford
 13 Banbury Road, Oxford, OX2 6NN, UK Tel:+44 1865 273232 Fax:+44 1865 273275
 EMail:       Neil.Long@computing-services.oxford.ac.uk  
 PGP:    ID 0xE88EF71F    OxCERT: oxcert@ox.ac.uk PGP: ID 0x4B11561D


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1001207121548.ZM11043>