Re: sshd: Logging illegal users

2004-08-24 Thread Thomas Hungenberg
On Fri, 20 Aug 2004 02:26:17 -0600, Will Aoki wrote: Set LogLevel VERBOSE in /etc/ssh/sshd_config LogLevel is already set to VERBOSE. But even with LogLevel DEBUG the invalid usernames are not logged. :-( I tested that on three different machines running Debian/woody. It works for me on

Re: sshd: Logging illegal users

2004-08-24 Thread Thomas Hungenberg
On Thu, 19 Aug 2004 11:52:51 +0300 (EEST), Martin Fluch wrote: Do you really want to log those illegal user names? If you do so, you would run into danger to log passwords in plain text as well, when you accidently enter the password when ssh asks you for the user name... I'm aware of that,

Re: sshd: Logging illegal users

2004-08-20 Thread Will Aoki
On Thu, Aug 19, 2004 at 10:44:40AM +0200, Thomas Hungenberg wrote: On Sun, 15 Aug 2004 12:34:59 -0600, Will Aoki wrote: Is there a way to make the sshd included with Debian/woody to also log the usernames an attacker tried to connect with? Set LogLevel VERBOSE in /etc/ssh/sshd_config

Re: sshd: Logging illegal users

2004-08-19 Thread Thomas Hungenberg
On Sun, 15 Aug 2004 12:34:59 -0600, Will Aoki wrote: Is there a way to make the sshd included with Debian/woody to also log the usernames an attacker tried to connect with? Set LogLevel VERBOSE in /etc/ssh/sshd_config LogLevel is already set to VERBOSE. But even with LogLevel DEBUG the

Re: sshd: Logging illegal users

2004-08-19 Thread Boris Veytsman
TH From: Thomas Hungenberg [EMAIL PROTECTED] TH Date: Thu, 19 Aug 2004 10:44:40 +0200 TH LogLevel is already set to VERBOSE. But even with LogLevel DEBUG the TH invalid usernames are not logged. :-( I was explained some time ago by somebody that this is a security feature rather than a bug.

Re: sshd: Logging illegal users

2004-08-16 Thread Greg Folkert
On Sun, 2004-08-15 at 19:46 -0600, s. keeling wrote: Incoming from Greg Folkert: Hey, I have found some thing. Rather than repost. I'll share where I posted it. http://z.iwethey.org/forums/render/content/show?contentid=169321 Zope Error Hmmm... try it again. I get it. I'd be

Re: sshd: Logging illegal users

2004-08-15 Thread Will Aoki
On Sun, Aug 15, 2004 at 07:15:18PM +0200, Thomas Hungenberg wrote: Hello, [snip] Is there a way to make the sshd included with Debian/woody to also log the usernames an attacker tried to connect with? Set LogLevel VERBOSE in /etc/ssh/sshd_config -- William Aoki KD7YAF [EMAIL PROTECTED] /\

Re: sshd: Logging illegal users

2004-08-15 Thread Greg Folkert
On Sun, 2004-08-15 at 19:15 +0200, Thomas Hungenberg wrote: Hello, sshd included with Debian/sarge logs connection attempts with illegal usernames this way: sshd[xxx]: Illegal user username from xxx.xxx.xxx.xxx sshd[xxx]: Failed unknown for illegal user username from xxx.xxx.xxx.xxx port