Hi, I am trying to use internal-sftp to limit sftp only access to a set of users. I have set sshd_config as follows sshd_config ==========Subsystem sftp internal-sftp -f LOCAL0 -l VERBOSE Match group ftp ChrootDirectory /sftp/%u X11Forwarding no AllowTcpForwarding no ForceCommand internal-sftp -f LOCAL0 -l VERBOSE Match I am able to access internal-sftp and run sftp sessions properly. But, I am not able to capture the loggings written by internal-sftp process. My syslog config settings are /etc/syslog/syslog =================SYSLOGD_OPTIONS="-m 0 -a /sftp/sftp.log.socket" syslog.conf ==========In addition, syslog.conf has local7.debug /var/log/sftp.log # Save boot messages also to boot.log local7.* /var/log/boot.log I am running RedHad 6 (2.6.9) in VM environment and I am using openssh 5.9 I need help in capturing internal-sftp process log in syslogs. Thanks, Raghu
On Mon, May 07, 2012 at 07:32:39PM +0000, Raghu Udupa wrote:> I am trying to use internal-sftp to limit sftp only access to a set of users.[...]> SYSLOGD_OPTIONS="-m 0 -a /sftp/sftp.log.socket"the code in syslog(3) is probably trying to open /dev/log within the chroot. Try -a /sftp/dev/log, and if that fails try strace'ing the sshd process to see where it's looking. -- Darren Tucker (dtucker at zip.com.au) GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69 Good judgement comes with experience. Unfortunately, the experience usually comes from bad judgement.