Hello,

I was wondering if someone can plesae tell me the shell command to see failed/successful ssh access attempts to my Fedora machine.

Thanks

ssh logins normally end up in /var/log/secure

Actually, in most systems by default it's in /var/log/messages, /var/log/secure is for sudo commands/access.

Default on my Debian boxes is /var/log/auth.log

Ubuntu boxes are set to /var/log/auth.log as well.

You could do something like:
{CODE]grep FAILED -i /var/log/*[/CODE]

Also you can install logwatch to send daily summary reports by mail of potential problems found in the log files.

i think not. cowboy.

Ok so Debian is screwed up and likes to be unormal.. Redhat systems and it's derivatives use /var/log/messages as do Slackware, and that is really all that matters..

are you suggesting i'm one of those smug greasy debian types? good grief. all redhat boxes i touch contain verbose ssh logging in the secure file, more useful than the noise in messages.

Logging ssh to /var/log/messages does seem a bit silly, as just about everything else logs there... I would've thought something as significant as SSH would go somewhere more noticable (who actually looks in messages unless something is broken?)

I was just trying to point out that by default on Redhat and on most systems, it logs to messages instead of secure, especially since he mentioned he was using Fedora. /var/log/secure is for security type errors with sudo, etc. I wouldn't think a simple login from a user counts as a security measure, since it can happen on some systems so very often. I'd rather be concerned with sudo abuse and other security concerns in a separate log of their own, not in the "noisy" messages log..

But damn, log wherever you want.. no need to get all defensive about it..

Wasn't trying to get defensive at all. I've just seen too many systems with TONS of messages in messages, to the point where nobody could find anything at all. I understand that each distro has its own way of handling things, and logging successful logins to secure wouldn't make much sense either, I agree.

you sound all appologetic. just call him a hick and he'll leave you alone

Oh you're just mad cause I made sense..