LinuxQuestions.org
View the Most Wanted LQ Wiki articles.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 08-02-2011, 02:29 PM   #1
Sea-you
LQ Newbie
 
Registered: Aug 2011
Posts: 2

Rep: Reputation: Disabled
Question Chrooted OpenSSH SFTP server logging issue


Hi all,

I have a problem related to logs in a chrooted sftp server where user home directories are on an NFS share. (/CHROOT-NFS)
Basically I have let's say 500 users each one of them are chrooted in their own home directory.
Since I want verbose logging as well, I have to create dev/log in each user directory and make the syslog daemon listen to it. (/CHROOT-NFS/user200/dev/log)
Everthing is working fine with one server.

BUT I have for eg. 10 servers using the same NFS share to share the SFTP load. I though that it's not gonna be a problem, I just set the same sylog setup on all servers and thats it. Unfortunately this doesn't work because logging works only on the server where I created the device files originally.

Any idea? I hope I was enough detailed to understand this mess

Thanks in advance,
cU
 
Old 08-03-2011, 01:08 PM   #2
wpeckham
Member
 
Registered: Apr 2010
Location: USA
Distribution: Debian, Ubuntu, Fedora, RedHat, DSL, Puppy, CentOS, Knoppix
Posts: 746

Rep: Reputation: 169Reputation: 169
Syslog

Set up syslog to log to files on ONE server (your syslog server) and the configure syslog on the OTEHR servers to forward to that ONE. Check the manpage and config file comments: it is not difficult.
 
Old 08-03-2011, 09:09 PM   #3
chrism01
Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.5, Centos 5.10
Posts: 16,225

Rep: Reputation: 2021Reputation: 2021Reputation: 2021Reputation: 2021Reputation: 2021Reputation: 2021Reputation: 2021Reputation: 2021Reputation: 2021Reputation: 2021Reputation: 2021
Actually, it is possible (and prob advisable, given the nums of users & servers involved) to have each server have its own logs and each server can also fwd same log info to a central server, as above.


Eg (RHEL/Centos): on the central logging server
Code:
#Edit /etc/sysconfig/syslog. Add “-r” to the SYSLOGD_OPTIONS line:

SYSLOGD_OPTIONS="-m 0 -r"

Restart syslogd with:

service syslog restart
On sending server
Code:
/etc/syslog.conf is something like:

*.info;cron.!=info;mail.none;local0.notice          @logs.company.com

#where logs.company.com is the machine you just set up to listen to syslog messages.
& restart syslog here also.

See 'The Easy Way' section here http://lonesysadmin.net/2011/01/13/h...d-hatcentos-5/

PS I'd prob use the IP of the central server, rather than DNS name: YMMV
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
SFTP server chrooted humbletech99 Linux - Security 2 04-02-2007 01:24 PM
sftp chrooted on samba - suggestions yogaboy Linux - Security 2 12-28-2006 08:24 AM
chrooted SFTP + FTP server TotalDefiance Linux - Server 4 12-08-2006 08:37 AM
Problem with Scponly and chrooted SFTP kicko Mandriva 2 07-14-2006 01:10 PM
Remote backup server: vsftpd/SSL or openssh/sftp or... ? krog Linux - Security 3 04-24-2006 11:50 PM


All times are GMT -5. The time now is 11:12 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration