LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 08-02-2011, 03:29 PM   #1
Sea-you
LQ Newbie
 
Registered: Aug 2011
Posts: 2

Rep: Reputation: Disabled
Question Chrooted OpenSSH SFTP server logging issue


Hi all,

I have a problem related to logs in a chrooted sftp server where user home directories are on an NFS share. (/CHROOT-NFS)
Basically I have let's say 500 users each one of them are chrooted in their own home directory.
Since I want verbose logging as well, I have to create dev/log in each user directory and make the syslog daemon listen to it. (/CHROOT-NFS/user200/dev/log)
Everthing is working fine with one server.

BUT I have for eg. 10 servers using the same NFS share to share the SFTP load. I though that it's not gonna be a problem, I just set the same sylog setup on all servers and thats it. Unfortunately this doesn't work because logging works only on the server where I created the device files originally.

Any idea? I hope I was enough detailed to understand this mess

Thanks in advance,
cU
 
Old 08-03-2011, 02:08 PM   #2
wpeckham
Member
 
Registered: Apr 2010
Location: USA
Distribution: Debian, Ubuntu, Fedora, RedHat, DSL, Puppy, CentOS, Knoppix
Posts: 832

Rep: Reputation: 181Reputation: 181
Syslog

Set up syslog to log to files on ONE server (your syslog server) and the configure syslog on the OTEHR servers to forward to that ONE. Check the manpage and config file comments: it is not difficult.
 
Old 08-03-2011, 10:09 PM   #3
chrism01
Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.6, Centos 5.10
Posts: 16,324

Rep: Reputation: 2041Reputation: 2041Reputation: 2041Reputation: 2041Reputation: 2041Reputation: 2041Reputation: 2041Reputation: 2041Reputation: 2041Reputation: 2041Reputation: 2041
Actually, it is possible (and prob advisable, given the nums of users & servers involved) to have each server have its own logs and each server can also fwd same log info to a central server, as above.


Eg (RHEL/Centos): on the central logging server
Code:
#Edit /etc/sysconfig/syslog. Add “-r” to the SYSLOGD_OPTIONS line:

SYSLOGD_OPTIONS="-m 0 -r"

Restart syslogd with:

service syslog restart
On sending server
Code:
/etc/syslog.conf is something like:

*.info;cron.!=info;mail.none;local0.notice          @logs.company.com

#where logs.company.com is the machine you just set up to listen to syslog messages.
& restart syslog here also.

See 'The Easy Way' section here http://lonesysadmin.net/2011/01/13/h...d-hatcentos-5/

PS I'd prob use the IP of the central server, rather than DNS name: YMMV
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
SFTP server chrooted humbletech99 Linux - Security 2 04-02-2007 02:24 PM
sftp chrooted on samba - suggestions yogaboy Linux - Security 2 12-28-2006 09:24 AM
chrooted SFTP + FTP server TotalDefiance Linux - Server 4 12-08-2006 09:37 AM
Problem with Scponly and chrooted SFTP kicko Mandriva 2 07-14-2006 02:10 PM
Remote backup server: vsftpd/SSL or openssh/sftp or... ? krog Linux - Security 3 04-25-2006 12:50 AM


All times are GMT -5. The time now is 05:46 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration