Date: Thu, 23 Apr 1998 11:50:27 -0700 (PDT) From: Jan Koum <jkb@best.com> To: Gary Schrock <root@eyelab.psy.msu.edu> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: any way to make ssh logins log to messages? Message-ID: <Pine.BSF.3.96.980423114611.2715B-100000@shell6.ba.best.com> In-Reply-To: <199804231712.NAA08084@eyelab.psy.msu.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
Of course. Look at /etc/sshd_config and where it say
SyslogFacility, change whatever second word is there to AUTH,
then, add the following line to /etc/syslog.conf:
auth.* /var/log/authlog
make sure to use tabs ("man 5 syslog.conf"). Then do "touch
/var/log/authlog", chown it the way you like it, chmod to 640 and restart
syslogd (or HUP it -- "man kill").
BTW, why does by default FreeBSD wouldn't have auth.* in it's
syslog.conf? Is there a reason for it? Ugh.. this better be asked in
-security list.
-- Yan
P.S. -- Don't use root for eMails. :)
Jan Koum jkb@best.com | "Turn up the lights; I don't want
www.FreeBSD.org -- The Power to Serve | to go home in the dark."
Linux -- Window95 of the Unix world.
On Thu, 23 Apr 1998, Gary Schrock wrote:
>Is there something I can add to my syslog.conf to make logins via ssh show
>up in messages (similar to how logins via telnet behave currently) (most of
>my syslog.conf is the default one that ships with freebsd plus a couple of
>changes). I've noticed that it will log a root login, but doesn't seem to
>log any others, and I haven't gotten around to digging into the source to
>find out whether it's actually sending things to syslog just at a level
>below what I'm logging, or whether it's not sending anything at all.
>
>Thanks,
>
>Gary Schrock
>root@eyelab.msu.edu
>
>
>To Unsubscribe: send mail to majordomo@FreeBSD.org
>with "unsubscribe freebsd-questions" in the body of the message
>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.980423114611.2715B-100000>