failed ssh login attempts not logged by rsyslog

Kernels & Hardware, configuring network, installing services

failed ssh login attempts not logged by rsyslog

Postby awayand » 2017-05-06 21:53

Hi there,

I am running a pretty vanilla Debian 8.7 installation and noticed any failed sshd logins are not showing up in /var/log/auth.log. I have tried restarting sshd as well as rsyslogd, but no luck.

Anyone else have this problem? I have heard from a friend that knows a lot about computers that it is impossible to troubleshoot this kind of thing on linux and I am probably better off reinstalling. Any advice highly appreciated!

Mark

Edit: I found the solution by simply uninstalling rsyslogd and installing syslog-ng instead. Now logging works just fine. I'd still be curious to know what was causing this, rsyslogd was running as root as per ps, so it wasn't a permission problem.
awayand
 
Posts: 1
Joined: 2017-05-06 21:49

Re: failed ssh login attempts not logged by rsyslog

Postby phenest » 2017-05-07 10:46

awayand wrote:I have heard from a friend that knows a lot about computers that it is impossible to troubleshoot this kind of thing on linux and I am probably better off reinstalling.

awayand wrote:Edit: I found the solution by simply uninstalling rsyslogd and installing syslog-ng instead. Now logging works just fine.


I guess your friend doesn't know that much after all.
NEC Spirit 550 P4 3.8GHz HT - 2GB RAM - nVidia 7600GT - Pioneer BDR-209DBK
ASUS Sabertooth P67 i7 3770K - 32GB RAM - 2x nVidia 660GTX SLI'd
User avatar
phenest
 
Posts: 1571
Joined: 2010-03-09 09:38
Location: The Matrix


Return to System configuration

Who is online

Users browsing this forum: No registered users and 6 guests

fashionable