Logging failed login attempts (version 3.7.1p2)

[Darren Tucker]

Bill Heafey wrote:
> 
> Is it possible to configure sshd (version 3.7.1p2, in my case)  to log all
> failed login attempts?
> 
> I've messed around with various syslog.conf settings and I've modified the
> sshd_config file to "UseLogin yes", assuming this may be required in order
> to leverage the /etc/default/login settings used by telnet.  Nothing has
> worked, so far.
> 
> For auditing purposes, I've been asked to show that failed login attempts
> are logged.

Try LogLevel VERBOSE in sshd_config.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.