--- Garance A Drosihn <[EMAIL PROTECTED]> wrote: > At 11:46 AM -0800 2/28/06, spcatch55 wrote: > >I want to see a log of all users that log in via > ssh, > >yet the /var/log/sshd.log file does not exist. > This > >is on a Debian Linux (knoppix 3.4). > > > >/etc/ssh/sshd_config contains this: > > SyslogFacility AUTH > > LogLevel INFO > > > >Any ideas of where my configuration is wrong? > > You need to check your /etc/syslog.conf file (or > equivalent), and > see where it is sending 'auth.log' records. if you > have a line > such as: > > auth.info;authpriv.info /var/log/auth.log > > then you may have to create /var/log/auth.log and > send a -HUP > signal to the syslogd daemon to get it to re-read > the config > file, and notice that the file now exists. I > believe that most > syslogd's require that the file already exist before > they will > write any log records to them. > > Note that you will probably want special permissions > on that > log file, and that you'll want to make sure some > process is > periodically checking the file and rotating it if > necessary. > > -- > Garance Alistair Drosehn = > [EMAIL PROTECTED] > Senior Systems Programmer or > [EMAIL PROTECTED] > Rensselaer Polytechnic Institute or > [EMAIL PROTECTED] >
Thanks for your response. ok /etc/syslog.conf contains this: auth,authpriv.* /var/log/auth.log *.*;auth,authpriv.none -/var/log/syslog But auth.log has size 0. It seems like its configured correctly, so I dont know why the logs aren't written to the file. Likewise /var/log/messages is also of size 0. I wonder how to turn the logging on? How do I send a -HUP signal to the syslogd daemon? __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
