Red Hat Bugzilla – Bug 331
new syslogd drops shh login attempts
Last modified: 2008-05-01 11:37:48 EDT
The updated syslogd no longer reports ssh logins, attempted
or completed. No changes have been made in the
/etc/syslog.conf. /var/log/security shows no records after
ssh logins from 3 different machines. ditto for messages.
Same problem on redhat 5.1 as well. Using ssh 2.0.9
using RH5.2, /var/log/messages shows ssh activity. sysklogd pkg is
1.3-25. Updating sysklogd to 1.3-26 had no effect on the logging.
/var/log/secure shows nothing reflecting ssh activity.