I think this is default behaviour for ssh, so I suppose SuSE's installation does this as well. I checked SuSE 6.4 for AXP, that logged ssh as well. I don't have any 7.0 machines with the default ssh, but I suppose this goes for them as well. Stefan On Mon, 13 Nov 2000, Kurt Seifried wrote:
Hi all!
Is there a possibility to display failed logins during ssh-Login, like "FAILLOG_ENAB yes" in /etc/login.defs does for rlogin/telnet ??
RedHat 7.0 by default does:
Nov 13 04:35:10 server sshd[6635]: Failed password for seifried from 127.0.0.1 port 1023 ssh2 Nov 13 04:35:10 server last message repeated 2 times Nov 13 04:35:10 server sshd[6635]: Connection closed by 127.0.0.1
Here's the bit of my sshd_config:
# Logging SyslogFacility AUTH LogLevel INFO
You probably have a different logging level enabled that provides less info, also check syslog.conf for where the output is going.
Regards,
Volker Weinberg
-Kurt
--------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
========================================== Stefan Suurmeijer Network Specialist University of Groningen tel: (++31) 50 363 3423 / 8258 fax: (++31) 50 363 7272 E-mail (business): s.m.suurmeijer@let.rug.nl or : s.m.suurmeijer@rc.rug.nl E-mail (private): stefan@symbolica.nl ========================================== Quidquid id est, timeo Microsoftum et dona ferentis (Whatever it is, I fear Microsoft, even when they are bringing gifts) The hardware requirements were Windows 95 or better, so I installed Linux