On Mon, Jan 3, 2011 at 8:11 PM, Robert Wyatt <chupacerv...@gmail.com> wrote:
> Did you restart the ssh daemon after the changes (not sure I mentioned it)?
Yes.
> Here's some of my secure.log for comparison (I think yours and mine are
> identical formats at this point, but another pair of eyes couldn't hurt):
>
> Dec 18 08:01:56 reg066 com.apple.SecurityServer[21]: getpwnam() failed for
> user vbox, creating invalid credential
> Dec 18 08:01:56 reg066 com.apple.SecurityServer[21]: Failed to authorize
> right system.login.tty by client /usr/sbin/sshd for authorization created by
> /usr/sbin/sshd.
> Dec 18 08:01:56 reg066 sshd[71490]: error: PAM: Authentication failure for
> illegal user vbox from 67.205.89.136
> Dec 18 08:01:56 reg066 sshd[71490]: Failed keyboard-interactive/pam for
> invalid user vbox from 67.205.89.136 port 33709 ssh2
> Dec 18 08:01:56 reg066 com.apple.SecurityServer[21]: getpwnam() failed for
> user xbox, creating invalid credential
> Dec 18 08:01:56 reg066 com.apple.SecurityServer[21]: Failed to authorize
> right system.login.tty by client /usr/sbin/sshd for authorization created by
> /usr/sbin/sshd.
> Dec 18 08:01:56 reg066 sshd[71493]: error: PAM: Authentication failure for
> illegal user xbox from 67.205.89.136
> Dec 18 08:01:56 reg066 sshd[71493]: Failed keyboard-interactive/pam for
> invalid user xbox from 67.205.89.136 port 37787 ssh2
>
Yes, our log files are the same. Yes, I verified that hosts.deny was being
populated.
--
Jonathan S. Abrams, CEA, CBNT
Apple Certified Technical Coordinator (v10.5), Xsan 2 Admin
Treasurer, NY Section, AES
------------------------------------------------------------------------------
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment, and,
should the need arise, upgrade to a full multi-node Oracle RAC database
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Denyhosts-user mailing list
Denyhosts-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/denyhosts-user
