These are the steps to enable logging of sshd on Solaris 8
Will probably work on 9 and 10, though the restart of syslog in 10 is different.
Add one line to syslog configuration file
vi /etc/syslog.conf
auth.info /var/log/sshd.log
Create the log file
touch /var/log/sshd.log
Enable syslog in the sshd_config (uncomment line)
vi /etc/ssh/sshd_config
SyslogFacility AUTH
LogLevel INFO
Restart syslogd
/etc/init.d/syslog stop
/etc/init.d/syslog start
Login and check that there is a new entry in /var/log/sshd.log
Leave a Reply
You must be logged in to post a comment.