Enable Syslog Logging Of SSH Access

These are the steps to enable logging of sshd on Solaris 8
Will probably work on 9 and 10, though the restart of syslog in 10 is different.

Add one line to syslog configuration file
vi /etc/syslog.conf

auth.info /var/log/sshd.log

Create the log file
touch /var/log/sshd.log

Enable syslog in the sshd_config (uncomment line)
vi /etc/ssh/sshd_config

SyslogFacility AUTH
LogLevel INFO

Restart syslogd

/etc/init.d/syslog stop
/etc/init.d/syslog start

Login and check that there is a new entry in /var/log/sshd.log


Posted

in

by

Comments

Leave a Reply