Feature #690
closed
Move SSH Authentication Attempts from System Log to New Log
0%
Description
SSH authentication failures currently go to the System log. With its limit of displaying 50 lines, only a handful of authentication failures will fill this log, obscuring other System messages. Therefore, I would like to request that a separate authentication log be used (similar to the de facto auth.log) for such things.
One can try to work around this by restricting where SSH can come from (via a filter), moving SSH to another port, or turning on cert-only authentication (to reduce the number of lines in the log from auth failures), but that only sidesteps the issue.
Updated by Chris Buechler almost 14 years ago
- Affected Version deleted (
2.0)
You can increase the limit from 50 under Settings if you so desire. We can't move every little thing out to its own logging tab or there would be hundreds of tabs, but it may be worthwhile to consider an auth.log equivalent in the future.