Bug 738364
| Summary: | rsyslog writes bad timestamps for some ssh log messages (timezone problem?) | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Peter Backes <rtc> |
| Component: | rsyslog | Assignee: | Tomas Heinrich <theinric> |
| Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 15 | CC: | prd-fedora, pvrabec, ronald.wahl, theinric |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2012-02-28 13:55:50 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
I'm seeing this too, only more extreme. I'm in PDT, which is -7 hours. The correct time is 9:40AM but the time written looks like UTC. Oct 8 09:40:18 wrangler sshd[19920]: Invalid user william from 211.138.126.129 Oct 8 16:40:18 wrangler sshd[19921]: input_userauth_request: invalid user william Could this be a regression of Bug 435472 ? That appears to be the identical bug. But, it appears to have been pretty thoroughly discussed, and a code change was made and released. *** This bug has been marked as a duplicate of bug 712151 *** |
Description of problem: some of the log messages generated by the ssh server seem to have timestamps with incorrect timezone. Version-Release number of selected component (if applicable): rsyslog-5.8.2-1.fc15.i686 openssh-5.6p1-34.fc15.1.i686 How reproducible: always Steps to Reproduce: 1. start openssh server 2. wait for failed login attempts 3. tail /var/log/secure Actual results: ... Sep 14 17:29:25 helen sshd[9854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.140.165.85 user=root Sep 14 17:29:27 helen sshd[9854]: Failed password for root from 219.140.165.85 port 56082 ssh2 Sep 14 15:29:27 helen sshd[9855]: Received disconnect from 219.140.165.85: 11: Bye Bye ^--------------- Here Expected results: ... Sep 14 17:29:25 helen sshd[9854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.140.165.85 user=root Sep 14 17:29:27 helen sshd[9854]: Failed password for root from 219.140.165.85 port 56082 ssh2 Sep 14 17:29:27 helen sshd[9855]: Received disconnect from 219.140.165.85: 11: Bye Bye Additional info: