Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > Linux Forums > HOWTO-Related Questions

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #11  
Old 28th November 2006, 15:22
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,740 Times in 2,575 Posts
Default

There's no /var/log/auth.log, and apparently /var/run is also missing. Did you maybe delete them? Because they exist on a standard Debian installation.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
Sponsored Links
  #12  
Old 28th November 2006, 16:49
Berry Berry is offline
Member
 
Join Date: Nov 2006
Posts: 69
Thanks: 10
Thanked 1 Time in 1 Post
Send a message via Skype™ to Berry
Default

Quote:
Originally Posted by falko
There's no /var/log/auth.log, and apparently /var/run is also missing. Did you maybe delete them? Because they exist on a standard Debian installation.
I'm using VPS (Virtuozzo virtual server) system and my Sarge was preinstalled, I just continued "perfect sarge howto" with packages installs...

What could/should I do?
Reply With Quote
  #13  
Old 29th November 2006, 16:14
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,740 Times in 2,575 Posts
Default

What's in /etc/syslog.conf?
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #14  
Old 29th November 2006, 16:25
Berry Berry is offline
Member
 
Join Date: Nov 2006
Posts: 69
Thanks: 10
Thanked 1 Time in 1 Post
Send a message via Skype™ to Berry
Default

Quote:
Originally Posted by falko
What's in /etc/syslog.conf?
Code:
daemon.*;*.=notice;*.=warn;\
*.info;mail.none;authpriv.none;cron.none                -/var/log/messages
authpriv.*                                              -/var/log/secure
mail.*                                                  -/var/log/maillog
cron.*                                                  -/var/log/cron
*.emerg                                                 *
uucp,news.crit                                          -/var/log/spooler
local7.*                                                -/var/log/boot.log
Reply With Quote
  #15  
Old 30th November 2006, 15:47
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,740 Times in 2,575 Posts
Default

Ok, your system is logging to /var/log/secure instead of /var/log/auth.log.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #16  
Old 5th December 2006, 14:20
Berry Berry is offline
Member
 
Join Date: Nov 2006
Posts: 69
Thanks: 10
Thanked 1 Time in 1 Post
Send a message via Skype™ to Berry
Default

Code:
daemon.*;*.=notice;*.=warn;\
*.info;mail.none;authpriv.none;cron.none                -/var/log/messages
authpriv.*                                              -/var/log/secure
mail.*                                                  -/var/log/maillog
cron.*                                                  -/var/log/cron
*.emerg                                                 *
uucp,news.crit                                          -/var/log/spooler
local7.*                                                -/var/log/boot.log
Quote:
Originally Posted by falko
Ok, your system is logging to /var/log/secure instead of /var/log/auth.log.
my /var/log/secure doesn't contain logs of SSH connections, all lines are like :

Dec 5 13:55:25 localhost proftpd[23679] .....

any clues how/where to look for log of SSH connects as DenyHosts has blocked 3 IP's and I want to investigate why
Reply With Quote
  #17  
Old 6th December 2006, 17:16
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,740 Times in 2,575 Posts
 
Default

You could add
Code:
auth,authpriv.*                 /var/log/auth.log
to /etc/syslog.conf and run
Code:
/etc/init.d/sysklogd restart
The login attempts should then be logged in /var/log/auth.log.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Xen 3.0, Ubuntu 5.10, and Windows 2003 Server Jcorrea920 HOWTO-Related Questions 3 4th May 2006 11:26
Xen Ubuntu VM Install Question witless1 HOWTO-Related Questions 5 3rd May 2006 15:42
Ubuntu setup using SSH LuisC-SM HOWTO-Related Questions 9 16th April 2006 16:11
Is there a testing procedure for ISPConfig? deezone Installation/Configuration 14 22nd January 2006 19:41
Logging on to an ubuntu server DMJ HOWTO-Related Questions 3 8th January 2006 00:24


All times are GMT +2. The time now is 21:36.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.