Re: sshd: Logging illegal users

2004-08-24 Thread Thomas Hungenberg
On Thu, 19 Aug 2004 11:52:51 +0300 (EEST), Martin Fluch wrote: > Do you really want to log those illegal user names? If you do so, you > would run into danger to log passwords in plain text as well, when you > accidently enter the password when ssh asks you for the user name... I'm aware of tha

Re: sshd: Logging illegal users

2004-08-24 Thread Thomas Hungenberg
On Fri, 20 Aug 2004 02:26:17 -0600, Will Aoki wrote: >> > Set "LogLevel VERBOSE" in /etc/ssh/sshd_config >> >> LogLevel is already set to VERBOSE. But even with LogLevel DEBUG the >> invalid usernames are not logged. :-( >> I tested that on three different machines running Debian/woody. > > It wo

Re: sshd: Logging illegal users

2004-08-20 Thread Will Aoki
On Thu, Aug 19, 2004 at 10:44:40AM +0200, Thomas Hungenberg wrote: > On Sun, 15 Aug 2004 12:34:59 -0600, Will Aoki wrote: > > >> Is there a way to make the sshd included with Debian/woody to also log > >> the usernames an attacker tried to connect with? > > > > Set "LogLevel VERBOSE" in /etc/ssh/s

Re: sshd: Logging illegal users

2004-08-19 Thread Boris Veytsman
TH> From: Thomas Hungenberg <[EMAIL PROTECTED]> TH> Date: Thu, 19 Aug 2004 10:44:40 +0200 TH> LogLevel is already set to VERBOSE. But even with LogLevel DEBUG the TH> invalid usernames are not logged. :-( I was explained some time ago by somebody that this is a security feature rather than a bug

Re: sshd: Logging illegal users

2004-08-19 Thread Martin Fluch
On Thu, 19 Aug 2004, Thomas Hungenberg wrote: > On Sun, 15 Aug 2004 12:34:59 -0600, Will Aoki wrote: > > >> Is there a way to make the sshd included with Debian/woody to also log > >> the usernames an attacker tried to connect with? > > > > Set "LogLevel VERBOSE" in /etc/ssh/sshd_config > > LogL

Re: sshd: Logging illegal users

2004-08-19 Thread Thomas Hungenberg
On Sun, 15 Aug 2004 12:34:59 -0600, Will Aoki wrote: >> Is there a way to make the sshd included with Debian/woody to also log >> the usernames an attacker tried to connect with? > > Set "LogLevel VERBOSE" in /etc/ssh/sshd_config LogLevel is already set to VERBOSE. But even with LogLevel DEBUG th

Re: sshd: Logging illegal users

2004-08-16 Thread Greg Folkert
On Sun, 2004-08-15 at 19:46 -0600, s. keeling wrote: > Incoming from Greg Folkert: > > > > Hey, I have found some thing. Rather than repost. I'll share where I > > posted it. > > > > http://z.iwethey.org/forums/render/content/show?contentid=169321 > > "Zope Error" Hmmm... try it again. I get it

Re: sshd: Logging illegal users

2004-08-15 Thread s. keeling
Incoming from Greg Folkert: > > Hey, I have found some thing. Rather than repost. I'll share where I > posted it. > > http://z.iwethey.org/forums/render/content/show?contentid=169321 "Zope Error" -- Any technology distinguishable from magic is insufficiently advanced. (*) http:/

Re: sshd: Logging illegal users

2004-08-15 Thread Greg Folkert
On Sun, 2004-08-15 at 19:15 +0200, Thomas Hungenberg wrote: > Hello, > > sshd included with Debian/sarge logs connection attempts with illegal > usernames this way: > > sshd[xxx]: Illegal user from xxx.xxx.xxx.xxx > sshd[xxx]: Failed unknown for illegal user from xxx.xxx.xxx.xxx port > x s

Re: sshd: Logging illegal users

2004-08-15 Thread Will Aoki
On Sun, Aug 15, 2004 at 07:15:18PM +0200, Thomas Hungenberg wrote: > Hello, [snip] > Is there a way to make the sshd included with Debian/woody to also log > the usernames an attacker tried to connect with? Set "LogLevel VERBOSE" in /etc/ssh/sshd_config -- William Aoki KD7YAF [EMAIL PROTECTED]

sshd: Logging illegal users

2004-08-15 Thread Thomas Hungenberg
Hello, sshd included with Debian/sarge logs connection attempts with illegal usernames this way: sshd[xxx]: Illegal user from xxx.xxx.xxx.xxx sshd[xxx]: Failed unknown for illegal user from xxx.xxx.xxx.xxx port x ssh2 However, the older sshd version from Debian/woody by default only logs