NetBSD-Bugs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

bin/42540: /usr/bin/login does not log normal logins, does not log IP addresses

>Number:         42540
>Category:       bin
>Synopsis:       /usr/bin/login does not log normal logins, does not log IP 
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Dec 29 15:35:00 +0000 2009
>Originator:     Ed Ravin
>Release:        5.0.1
Public Access Networks Corp
NetBSD 5.0.1 NetBSD 5.0.1 (PANIX-XEN3U-USER) #0: Thu Nov  5 
07:26:24 EST 2009
1.  /usr/bin/login does not seem to generate syslog messages for normal, 
successful logins.  syslog messages are only produced in case of error, in case 
of root login, and a few other special cases.

2. When /usr/bin/login does generate syslog messages regarding remote 
connections, it uses the looked-up hostname, not the IP address. The IP address 
is needed since the results of DNS lookups can change over time and are not a 
reliable way to audit which hosts are connecting to you,
Connect to a NetBSD system via telnet and log in as a regular (non-root) user.

Try to find any syslog output generated by the login event.


Home | Main Index | Thread Index | Old Index