To allow easier targeting of users of old protocols I would find
it useful for the syslog "Accepted" messages to be more uniform.
1. Include the string "ssh1" for ssh1 connections as is done for ssh2
connections.
2. Change the "publickey" message for ssh2 connections to specify
which publickey, "dsa" or "rsa". This is already the
case for ssh1.
3. Insure the ssh1 and ssh2 accepted messages have the same number
of fields.
Presently the syslog lines end as:
ssh1:
passwd: Accepted password for user from xxx.xxx.xxx.xxx port 865
rsa : Accepted rsa for user from xxx.xxx.xxx.xxx port 976
ssh2:
passwd: Accepted password for user from xxx.xxx.xxx.xxx port 901 ssh2
dsa : Accepted publickey for user from xxx.xxx.xxx.xxx port 697 ssh2
rsa : Accepted publickey for user from xxx.xxx.xxx.xxx port 600 ssh2
Regards,
John
--
John Dunlap University of Washington
Senior Electrical Engineer Applied Physics Laboratory
dunlap at apl.washington.edu 1013 NE 40th Street
206-543-7207, 543-1300, FAX 543-6785 Seattle, WA 98105-6698