no ssh logging in /var/log/secure

mberd · 05-26-2009, 02:52 PM

while there are lines for ssh in /var/log/messages, none is recorded in /var/log/secure.

i do have some records in /var/log/secure but it stopped after i did something.

please help me diagnose what did i do..

thanks!

saavik · 05-26-2009, 04:05 PM

Everything logged from the kernel is configured in

/etc/syslog.conf

Maybe you just edited that file...

http://openskill.info/infobox.php?ID=1091

mberd · 05-26-2009, 11:41 PM

file /etc/syslog.conf has not been touched and has the following line:

authpriv.* /var/log/secure

saavik · 05-27-2009, 01:19 AM

Well that look ok for me.

a) How big is the file
b) How about the rwx (rights) of the file ? Who can access the file ?
c) Restart the syslog ( /etc/init.d/syslog restart )
Can be done at any time. Does not effect any other programs.

mberd · 05-27-2009, 07:55 AM

restarting the syslog fixed the the problem.

thank you, saavik!