[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
bin/42540: /usr/bin/login does not log normal logins, does not log IP addresses
>Synopsis: /usr/bin/login does not log normal logins, does not log IP
>Arrival-Date: Tue Dec 29 15:35:00 +0000 2009
>Originator: Ed Ravin
Public Access Networks Corp
NetBSD panix5.panix.com 5.0.1 NetBSD 5.0.1 (PANIX-XEN3U-USER) #0: Thu Nov 5
07:26:24 EST 2009
1. /usr/bin/login does not seem to generate syslog messages for normal,
successful logins. syslog messages are only produced in case of error, in case
of root login, and a few other special cases.
2. When /usr/bin/login does generate syslog messages regarding remote
connections, it uses the looked-up hostname, not the IP address. The IP address
is needed since the results of DNS lookups can change over time and are not a
reliable way to audit which hosts are connecting to you,
Connect to a NetBSD system via telnet and log in as a regular (non-root) user.
Try to find any syslog output generated by the login event.
Main Index |
Thread Index |