I've been seeing these messages for months.. Aug 31 20:19:29 cinq sshd[2342]: /var/log/lastlog: Permission denied
.. because sshd has dropped root privileges by the time pam_lastlog tries to log the message. I realise this was discussed on this list about 2 months ago, but it hasn't been fixed yet. Why not just go back to using openssh's built-in lastlog code until pam_lastlog can be made to work from within openssh? Tim To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message