Marc Lehmann <[email protected]> writes:

> When PrivilegeSeparation is on (the default), errors from pam modules are
> not logged anywhere (apparently, pam tries to open /dev/log in a chroot).

> this is somewhat serious as no message whatsoever gets logged for
> semi-successfull log-ins.

Er, that's strange.  What PAM modules are you seeing this with?  I always
use sshd with PrivilegeSeparation enabled, and so far as I can remember my
PAM modules have never had any trouble logging output to syslog, including
full debug output for every step in the process.  Maybe something new
changed, but I would have thought I'd notice.

-- 
Russ Allbery ([email protected])               <http://www.eyrie.org/~eagle/>



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
Archive: http://lists.debian.org/[email protected]

Reply via email to