PDA

View Full Version : Missing auth.log data


Jeeevs2001
January 4th, 2007, 07:57 AM
Hello,

I have been reading up on ssh security and the advice is to keep an eye on the auth.log file. Having looked through it today it seems to be missing data. For example I know I logged in yesterday (and if I use the 'last' command I can see when) but this does not show up in the auth.log file, it only has 3 entries for the last 2 days and they are all cron jobs by root.

Does anyone know why these log-ins would not appear in the auth.log?

Thanks

Jeeves

MJN
January 5th, 2007, 07:46 PM
Are you saying no SSH logins are showing in auth.log?

Mathew

Jeeevs2001
January 8th, 2007, 09:00 AM
Yes, it doesn't seem to be recording them at all.

Biggus
January 14th, 2007, 09:26 PM
Maybe there is something in the configuration file which is preventing external logins being logged?