Pretty much all my permissions come up with:
user has rw
group has r
world has r
I even tried to putting localtime in /var/empty/sshd - no luck...Yes, I
made sure correct permissions down through (drwxr-xr-x on each dir as
well as -rwxrwxrwx on localtime)
Being that this is my home network...internally I am pretty slack with
permissions... Honestly, it "seems" (I know typically stupid user
remark) that once I went to a dual CPU system running sshd, I noticed
the odd time stamps...
Robin Green wrote:
On Tue, 24 Oct 2006 15:59:16 -0500 (CDT)
"Jeremy C. Reed" <[EMAIL PROTECTED]> wrote:
Oct 23 08:57:26 adminserver sshd[19422]: Failed password for
invalid user ... ssh2
Oct 23 *04:57:30* adminserver sshd[19423]: Failed password for
invalid user ... ssh2
Oct 23 08:57:30 adminserver sshd[19424]: Failed password for
invalid user ... ssh2
Oct 23 *04:57:34* adminserver sshd[19425]: Failed password for
invalid user ... ssh2
Oct 23 08:57:34 adminserver sshd[19426]: Failed password for
invalid user ... ssh2
From looking at the openssh source for this (auth.c and log.c) I
don't see any timestamp added to the message.
Perhaps the timestamp is added by glibc.
When syslogd receives a message without timestamp it adds its own.
I don't know why your syslogd is logging with different times, but
I'm guessing that something is causing the timezone to change.
As I've already suggested, I think it's because the permissions on a
timezone file are wrong. Check the permissions on the
file /etc/timezone, the directory /etc, and the
directories /usr/share/zoneinfo, /usr/share and /usr, for example.
--
Scot P. Floess
27 Lake Royale
Louisburg, NC 27549
252-478-8087 (Home)
919-754-4592 (Work)
Chief Architect JPlate http://sourceforge.net/projects/jplate
Chief Architect JavaPIM http://sourceforge.net/projects/javapim