[Klug-general] Auditing SSH login sessions

Karl Buckland buckland.karl at googlemail.com
Fri May 27 11:43:50 UTC 2011


I think /var/log/auth.log shows auths of all types - so normal logins,
SSH and also Cron jobs that run as a user.

Karl

On 27 May 2011 12:30, Paul Littlefield <info at paully.co.uk> wrote:
> On 27/05/11 11:59, Colin McCarthy wrote:
>>
>> I've looked in the /var/log/audit/audit.log* files and I can see my logon
>> attempts but none of theirs
>
> Have a look in /var/log/auth.log and tell me what's there.
>
> Paully
>
> _______________________________________________
> Kent mailing list
> Kent at mailman.lug.org.uk
> https://mailman.lug.org.uk/mailman/listinfo/kent
>



More information about the Kent mailing list