openssh bugs - Jan 2013 - [Bug 2064] New: Enable logging of client_user at INFO priority rather than DEBUG2

https://bugzilla.mindrot.org/show_bug.cgi?id=2064

            Bug ID: 2064
           Summary: Enable logging of client_user at INFO priority rather
                    than DEBUG2
    Classification: Unclassified
           Product: Portable OpenSSH
           Version: 5.8p2
          Hardware: All
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: e5pivovarov at hotmail.com

One of the important features of hostbased authentication is that it
controls access from the specified client users. When such control is
desired, it is truly beneficial to supplement it with corresponding
information in the log. In other words, sshd log should get a message
that says which client user from which hostname and IP address logins
as which local user. In v5.8p2 such a message only comes from
auth_rhosts2_raw() in auth-rhosts.c and the message is at syslog
priority DEBUG2. Thus, it is not possible to get details about client
user without running sshd with log level as high as DEBUG2. It would be
highly desirable if this message or a similar message reporting
client_user had priority INFO.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2064

Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at zip.com.au
             Blocks|                            |2076

--- Comment #1 from Darren Tucker <dtucker at zip.com.au> ---
Damien, this might be doable with the recent auth_log changes?

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2064

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org
             Status|NEW                         |ASSIGNED
           Assignee|unassigned-bugs at mindrot.org |djm at mindrot.org
   Attachment #2295|                            |ok?(dtucker at zip.com.au)
              Flags|                            |

--- Comment #2 from Damien Miller <djm at mindrot.org> ---
Created attachment 2295
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2295&action=edit
Log key, client user and wire-specified client host for hostbased auth

Yes, though we should log the key too. This patch extends the recent
pubkey_auth_info() to allow logging of additional information besides
the key, and uses it to log the hostbased client user and client host
(as it appears in the userauth packet).

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2064

Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #2295|ok?(dtucker at zip.com.au)     |ok+
              Flags|                            |

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2064

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

--- Comment #3 from Damien Miller <djm at mindrot.org> ---
committed - this will be in openssh-6.3

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2064

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #4 from Damien Miller <djm at mindrot.org> ---
closing resolved bugs as of 8.6p1 release

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.