Date: Thu, 11 Feb 2016 22:35:07 +0200 From: Anton Sayetsky <vsasjason@gmail.com> To: Janos Dohanics <web@3dresearch.com> Cc: FreeBSD Questions <freebsd-questions@freebsd.org> Subject: Re: /var/log/auth.log missing Message-ID: <CAA2O=b91hdxYEJKkVAUfV3_upndtUY-OQyCYi1oaU4Nup=Cy3A@mail.gmail.com> In-Reply-To: <20160211133751.a58f4c0981a0c2af16762766@3dresearch.com> References: <20160211133751.a58f4c0981a0c2af16762766@3dresearch.com>
next in thread | previous in thread | raw e-mail | index | archive | help
11 =D1=84=D0=B5=D0=B2=D1=80. 2016 =D0=B3. 20:47 =D0=BF=D0=BE=D0=BB=D1=8C=D0= =B7=D0=BE=D0=B2=D0=B0=D1=82=D0=B5=D0=BB=D1=8C "Janos Dohanics" <web@3dresea= rch.com> =D0=BD=D0=B0=D0=BF=D0=B8=D1=81=D0=B0=D0=BB: > > Hello List, > > Just discovered that on one of my boxes (FreeBSD 9.3-STABLE #0 > r286291) /var/log/auth.log is missing. > > /etc/syslog.conf: > > # $FreeBSD: stable/9/etc/syslog.conf 238473 2012-07-15 10:55:43Z > # brueffer $ > # > # [commented stuff] > # Consult the syslog.conf(5) manpage. > +10.10.10.2 > local0.* /var/log/pfsense.log > +* > *.err;kern.warning;auth.notice;mail.crit /dev/console > *.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err /var/log/messages > security.* /var/log/security > #auth.info;authpriv.info /var/log/auth.log > auth.debug;authpriv.info /var/log/auth.log > mail.info /var/log/maillog > lpr.info /var/log/lpd-errs > ftp.info /var/log/xferlog > cron.* /var/log/cron > *.=3Ddebug /var/log/debug.log > *.emerg * > # uncomment this to log all writes to /dev/console > # [commented stuff] > # > # Cyrus > local6.debug /var/log/local6.log > !ppp > *.* /var/log/ppp.log > !* > > /etc/periodic.conf: > > monthly_statistics_enable=3D"YES" > monthly_statistics_report_devices=3D"YES" > monthly_statistics_report_ports=3D"YES" > daily_clean_hoststat_enable=3D"NO" > daily_status_mail_rejects_enable=3D"NO" > daily_status_include_submit_mailq=3D"NO" > daily_submit_queuerun=3D"NO" > # 406.status-gmirror > daily_status_gmirror_enable=3D"YES" > > I have restarted syslogd, however, no /var/log/auth.log, even though I > took actions such as ssh login which should trigger entries > in /var/log/auth.log. > > How can I fix this problem? # install -o root -g wheel -m 600 /dev/null /var/log/auth.log && service syslogd reload > Any guess what might have caused /var/log/auth.log not be created? Someone deleted it.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAA2O=b91hdxYEJKkVAUfV3_upndtUY-OQyCYi1oaU4Nup=Cy3A>