Bug#626112: openssh-server: ssh doesn't log some failed authentications to auth.log anymore

2011-08-02 Thread Christoph Anton Mitterer
On Thu, 2011-07-28 at 15:17 +0100, Colin Watson wrote: As far as I can tell, nothing relevant has changed in OpenSSH at all recently. Ok,.. weird... maybe there's something I don't see or I forgot,... was quite sure that it worked like that and I changed nothing,... Nevertheless... I don't

Bug#626112: openssh-server: ssh doesn't log some failed authentications to auth.log anymore

2011-07-28 Thread Colin Watson
severity 626112 important thanks On Wed, Jul 27, 2011 at 10:38:26PM +0200, Christoph Anton Mitterer wrote: On Sun, 2011-07-24 at 11:02 +0100, Colin Watson wrote: If you use 'LogLevel VERBOSE', does that help? Can you provide some examples of log messages that fail2ban is noticing and

Bug#626112: openssh-server: ssh doesn't log some failed authentications to auth.log anymore

2011-07-27 Thread Christoph Anton Mitterer
Hi Colin. On Sun, 2011-07-24 at 11:02 +0100, Colin Watson wrote: Did this work as you expect in some previous version? Which one? Yes definitely,.. but unfortunately,.. I don not remember which one.. If you use 'LogLevel VERBOSE', does that help? Can you provide some examples of log

Bug#626112: openssh-server: ssh doesn't log some failed authentications to auth.log anymore

2011-07-24 Thread Colin Watson
On Mon, May 09, 2011 at 12:15:19AM +0200, Christoph Anton Mitterer wrote: For *some* failed connections ssh seems to put no logging into auth.log anymore. Did this work as you expect in some previous version? Which one? This can be quite security relevant when using e.g. fail2ban which

Bug#626112: openssh-server: ssh doesn't log some failed authentications to auth.log anymore

2011-05-08 Thread Christoph Anton Mitterer
Package: openssh-server Version: 1:5.8p1-4 Severity: grave Tags: security Justification: user security hole Hi. For *some* failed connections ssh seems to put no logging into auth.log anymore. This can be quite security relevant when using e.g. fail2ban which relies on this. Only some