[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: sshd: Logging illegal users

On Sun, 15 Aug 2004 12:34:59 -0600, Will Aoki wrote:

>> Is there a way to make the sshd included with Debian/woody to also log
>> the usernames an attacker tried to connect with?
> Set "LogLevel VERBOSE" in /etc/ssh/sshd_config

LogLevel is already set to VERBOSE. But even with LogLevel DEBUG the
invalid usernames are not logged. :-(
I tested that on three different machines running Debian/woody.

Could this be a PAM issue? Is there perhaps a configuration variable
to turn on logging of invalid usernames in PAM like LOG_UNKFAIL_ENAB 
in /etc/login.defs?

      - Thomas

PGP: 2047Bit RSA, ID 0x668E601D - Encrypted mail welcome!

Reply to: