Logging of failed publickey authentication attempts

Johannes Bauer dfnsonfsduifb at gmx.de
Sat Mar 9 01:46:09 EST 2013


Hello list,

I'd like to monitor failed publickey authentication attempts to my
OpenSSH server and noticed that they're not logged (even in VERBOSE
logging mode). Doing some digging, I found this 8 year old bug:
https://bugzilla.mindrot.org/show_bug.cgi?id=974

Apparently, that issue was already known eight years ago and a patch is
even attached -- but it never made it into mainline? I'd like to ask if
it is planned to incorporate this change into OpenSSL? If not, why so?
Or has the bug just not been update and a fix already exists?

Best regards,
Johannes


More information about the openssh-unix-dev mailing list