[Bug 974] Record Badlogins for all supported Authentication methods

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Thu Feb 3 17:14:03 EST 2005


http://bugzilla.mindrot.org/show_bug.cgi?id=974





------- Additional Comments From dtucker at zip.com.au  2005-02-03 17:14 -------
(In reply to comment #21)
> > + AC_DEFINE(_PATH_BTMP, "/var/log/btmp", [log for bad login attempts])
> 
> In HP-UX it is "/var/adm/btmp" 

The line you quoted is from the Linux block.  On HP-UX it picks up the BTMP_FILE
definition from the system headers (see defines.h).  BTMP_FILE is defined on my
11.11 box, if it needs to be added for other versions just let me know which.

> > As to logging failures for the other auth types (pubkey, gssapi, hostbased), 
> > Idon't think that should be enabled by default
> 
> How about getting them under a sshd_config directive .

I'm not sure.  As a rule we try to keep the -Portable only config uptions to a
minimum to preserve our sanity.  Maybe a compile-time option to begin with
("-DPARANOID_AUTH_RECORDING" or something).



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.




More information about the openssh-bugs mailing list