First up, I'm new to Slackware but have used Linux for a number of years so I know my way around a *nix system.

I'm running Slackware 14.1 and I cannot seem to make sshd log anything useful about either failed or successful connection attempts.

I have lots of messages in /var/log/syslog of the following nature:
Jan 15 13:41:51 darkstar sshd[21197]: error: Could not get shadow information for NOUSER
Jan 15 13:42:10 darkstar sshd[21201]: error: Could not get shadow information for NOUSER
Jan 15 13:42:37 darkstar sshd[21207]: error: Could not get shadow information for NOUSER
Jan 15 13:42:46 darkstar sshd[21209]: error: Could not get shadow information for NOUSER

I have updated /etc/ssh/sshd_config to add:
SyslogFacility AUTH
LogLevel DEBUG

and I have restarted sshd (/etc/rc.d/rc.sshd restart)

Whatever I try, nothing seem to change the amount of information in the logs. I have also tried "LogLevel VERBOSE" with the same result.

Any help or pointers appreciated. Thanks

Have you looked in /var/log/messages? I see logging there in a stock config.

I've just seen "Could not get shadow information for NOUSER" on a new system myself. I do not know what causes that.

1 members found this post helpful.

Did you look in /var/log/auth.log?

In debian based that's where all the connection details go. At least in my experience.

Thanks, /var/log/messages does contain the information I was looking for. (Can't believe I didn't look there first Doh!)
I still have no idea what the error message in syslog really means but I guess I can safely ignore that.