At 11:46 AM -0800 2/28/06, spcatch55 wrote:
I want to see a log of all users that log in via ssh, yet the /var/log/sshd.log file does not exist. This is on a Debian Linux (knoppix 3.4)./etc/ssh/sshd_config contains this: SyslogFacility AUTH LogLevel INFO Any ideas of where my configuration is wrong?
You need to check your /etc/syslog.conf file (or equivalent), and see where it is sending 'auth.log' records. if you have a line such as: auth.info;authpriv.info /var/log/auth.log then you may have to create /var/log/auth.log and send a -HUP signal to the syslogd daemon to get it to re-read the config file, and notice that the file now exists. I believe that most syslogd's require that the file already exist before they will write any log records to them. Note that you will probably want special permissions on that log file, and that you'll want to make sure some process is periodically checking the file and rotating it if necessary. -- Garance Alistair Drosehn = [EMAIL PROTECTED] Senior Systems Programmer or [EMAIL PROTECTED] Rensselaer Polytechnic Institute or [EMAIL PROTECTED]
