LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 10-21-2006, 06:15 PM   #1
alfredofernandeza
LQ Newbie
 
Registered: Oct 2006
Distribution: Fedora Core 5
Posts: 23

Rep: Reputation: 15
Logging SSH Connections with openSSH


Hello,

I have installed a SSH server in a Fedora Core 5 computer. The system will be used by several users using their respective usernames and passwords. I was wondering if the system stores by itself a log of successful and attempted connections and where it is. I would also like to know a way of knowing the current state of the system, for instance knowing who is connected at any given time. I tried to use the who command but I made some tests and it doesn't seem to do what I want it to do, the who command didn't always display all of the remotely connected users. If the system doesn't do all this logging, is there any application that might work for me? Btw, the system is to be used primarily to download files though SCP.

Does anyone have any ideas?

Thank you,
Alfredo
 
Old 10-22-2006, 12:46 AM   #2
Jerre Cope
Member
 
Registered: Oct 2003
Location: Texas (central)
Distribution: ubuntu,Slackware,knoppix
Posts: 323

Rep: Reputation: 37
The /var/log/messages file should show you what you want to see.

Use tail -f /var/log/messages

and watch what happens as your users scp.

"who" will show you ssh login sessions, but not sftp and scp connections.
 
Old 10-22-2006, 01:17 AM   #3
alfredofernandeza
LQ Newbie
 
Registered: Oct 2006
Distribution: Fedora Core 5
Posts: 23

Original Poster
Rep: Reputation: 15
/var/log/messages

Hey,

I read the /var/log/messages and didn't find any useful information. I also tried to SCP while using tail -f /var/log/messages and nothing happened.

Any ideas?

Thank you,
Alfredo
 
Old 10-22-2006, 09:36 PM   #4
Jerre Cope
Member
 
Registered: Oct 2003
Location: Texas (central)
Distribution: ubuntu,Slackware,knoppix
Posts: 323

Rep: Reputation: 37
I don't have a FC5 box on hand. But typically sshd logs sshd activity for both public keys and interactive login. You may need to set:

SyslogFacility AUTH

in your /etc/ssh/sshd_config file.

Also, check if you have a /var/log/syslog file. FC5 may be logging ssh somewhere else.
 
Old 11-15-2006, 06:41 PM   #5
fukawi2
Member
 
Registered: Oct 2006
Location: Melbourne, Australia
Distribution: ArchLinux, ArchServer, Fedora, CentOS
Posts: 448

Rep: Reputation: 34
Try /var/log/secure on RedHat / Fedora systems...
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Setting up ssh connections without a password (OpenSSH) Suinatsa Linux - Software 2 07-05-2006 02:46 AM
OpenSSH - how to force logging of failed attempts? haertig Linux - Security 4 06-07-2006 05:49 PM
LXer: Accelerating OpenSSH connections with ControlMaster LXer Syndicated Linux News 0 06-07-2006 04:21 PM
LXer: Password-less Encrypted Connections with OpenSSH LXer Syndicated Linux News 0 01-05-2006 11:01 AM
Openssh logging in prob. neil Linux - Security 8 08-23-2001 03:19 AM


All times are GMT -5. The time now is 02:05 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration