Getting syslog to log auth messages
2007-12-25 9:24:00
I'd just like to update those who have sent suggestions so far. In
the order I tried them:
1. making sure there are tabs and not spaces between the selector and
action fields, thus:
auth.*<tab>/var/log/authlog
has no effect
2. using the line 'logger -p auth.notice "this is a test"' works every
time even with a * wildcard after auth.
3. changing the wildcard to debug or notice thus:
auth.debug /var/log/authlog
with a tab and no spaces suddenly started logging failed logins.
I suspect I had a combination of problems here, namely it needs tabs not
spaces and the BSD trailing wildcard flag is not supported (despite Sun
stealing syslogd from BSD unix). I tried using auth.debug yesterday instead
of auth.* with no success, but then I probably had spaces between selector
and action fields :-/
Cheers and thanks to everyone who helped, including (so far):
Jarrett Carver
Juergen Schreiner
Larry Garrett
Bernhard Sadlowski
Daniel Manne
Chris
--
Dr Chris Stoddart: Unix SysAdmin,
Department of Computer Science,
Sheffield University, U.K.
Comments
Got something to say?
You must be logged in to post a comment.
