[Bug 2199] "Too many authentication failures for root" does not log IP

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Thu Jul 3 14:05:30 EST 2014


https://bugzilla.mindrot.org/show_bug.cgi?id=2199

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #2449|                            |ok?(dtucker at zip.com.au)
              Flags|                            |
           Assignee|unassigned-bugs at mindrot.org |djm at mindrot.org
                 CC|                            |djm at mindrot.org
             Status|NEW                         |ASSIGNED

--- Comment #4 from Damien Miller <djm at mindrot.org> ---
Created attachment 2449
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2449&action=edit
Log authentication tries exceeded in similar format to success/failure

This patch logs the tries-exceeded message using a similar format to
the success/failure messages:

Jul  3 14:02:12 haru sshd[1334]: Disconnecting: Too many authentication
failures for djm from 127.0.0.1 port 27781 ssh2 [preauth]

and for invalid users:

Jul  3 14:03:02 haru sshd[6474]: Disconnecting: Too many authentication
failures for invalid user xxx from 127.0.0.1 port 34633 ssh2 [preauth]

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list