Actions
Feature #690
closedMove SSH Authentication Attempts from System Log to New Log
Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Logging
Target version:
-
Start date:
06/23/2010
Due date:
% Done:
0%
Estimated time:
Plus Target Version:
Release Notes:
Description
SSH authentication failures currently go to the System log. With its limit of displaying 50 lines, only a handful of authentication failures will fill this log, obscuring other System messages. Therefore, I would like to request that a separate authentication log be used (similar to the de facto auth.log) for such things.
One can try to work around this by restricting where SSH can come from (via a filter), moving SSH to another port, or turning on cert-only authentication (to reduce the number of lines in the log from auth failures), but that only sidesteps the issue.
Actions