lug-bg: syslogd && sshd logging question

[Maxim Mavrudiev]

 Zdrawejte, 
Interesuwa me kak moga da logna sshd syobshteniqta.
/etc/syslog.conf go logwa kato *.=info, koeto e malko
neudobno. w /etc/ssh/sshd_config namerih edin red:
LogLevel INFO, dadoh s/INFO/ssh/g, posle dadoh w
/etc/syslog.conf - *.=ssh   /usr/adm/ssh.

# sshd
/etc/ssh/sshd_config line 33: unsupported log level
'ssh'

Kakwo moga da naprawq po wyprosa, ili po-tochno kato
kakwo shte e naj-udobno da go logna tozi sshd?

Drugoto reshenie e da dobawq edin red w
/etc/syslog.conf ot roda na:

*ssh*   /usr/adm/ssh

, no pak ne mi wyrshi rabota zashtoto to pak si se
logwa w /var/log/messages by default

Idei wsqkakwi, no powecheto ne wyrshat rabota. Washte
idei kakwi sa?

  Blagodarq predwaritelno


__
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com

A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html

Re: lug-bg: syslogd && sshd logging question

[Ted Zlatanov]

On Tue, 10 Dec 2002, [EMAIL PROTECTED] wrote:
>  Zdrawejte, 
> Interesuwa me kak moga da logna sshd syobshteniqta.
> /etc/syslog.conf go logwa kato *.=info, koeto e malko
> neudobno. w /etc/ssh/sshd_config namerih edin red:
> LogLevel INFO, dadoh s/INFO/ssh/g, posle dadoh w
> /etc/syslog.conf - *.=ssh   /usr/adm/ssh.

(Redhat OpenSSH конфигурация, малко трябва да се промени за други
типове Unix)

/etc/syslog.conf прибави:

local2.*/var/log/sshd.log

/etc/ssh/sshd_config промени SyslogFacility:

SyslogFacility LOCAL2

После, за да захапе:

/etc/init.d/syslog restart
/etc/init.d/sshd restart

Тоест, използвай LOCAL2 вместо да дефинираш нови нива на syslog.

'man logger':

 Valid facility names are: auth, authpriv (for security information of a
 sensitive nature), cron, daemon, ftp, kern, lpr, mail, news, security
 (deprecated synonym for auth), syslog, user, uucp, and local0 to local7,
 inclusive.

Имай предвид че sshd нормално пише на authpriv, което обикновено е
правилното ниво за тази цел - виж 'man logger', 'man syslog', 'man
syslogd'.  Целта е да се разпределя информацията по интерес и
спешност, а не по програмата.

Теодор

A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html