--- Garance A Drosihn wrote:

> At 11:46 AM -0800 2/28/06, spcatch55 wrote:
> >I want to see a log of all users that log in via

> ssh,
> >yet the /var/log/sshd.log file does not exist.

> This
> >is on a Debian Linux (knoppix 3.4).
> >
> >/etc/ssh/sshd_config contains this:
> > SyslogFacility AUTH
> > LogLevel INFO
> >
> >Any ideas of where my configuration is wrong?

> You need to check your /etc/syslog.conf file (or
> equivalent), and
> see where it is sending 'auth.log' records. if you
> have a line
> such as:
> auth.info;authpriv.info /var/log/auth.log
> then you may have to create /var/log/auth.log and
> send a -HUP
> signal to the syslogd daemon to get it to re-read
> the config
> file, and notice that the file now exists. I
> believe that most
> syslogd's require that the file already exist before
> they will
> write any log records to them.
> Note that you will probably want special permissions
> on that
> log file, and that you'll want to make sure some
> process is
> periodically checking the file and rotating it if
> necessary.
> --
> Garance Alistair Drosehn =
> gad@gilead.netel.rpi.edu
> Senior Systems Programmer or
> gad@freebsd.org
> Rensselaer Polytechnic Institute or
> drosih@rpi.edu

Thanks for your response. ok /etc/syslog.conf contains
auth,authpriv.* /var/log/auth.log
*.*;auth,authpriv.none -/var/log/syslog

But auth.log has size 0. It seems like its configured
correctly, so I dont know why the logs aren't written
to the file. Likewise /var/log/messages is also of
size 0. I wonder how to turn the logging on? How do
I send a -HUP signal to the syslogd daemon?

Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around