openssh unix dev - Apr 2002 - [Bug 113] input_userauth_request: illegal user ...

http://bugzilla.mindrot.org/show_bug.cgi?id=113

djm at mindrot.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WORKSFORME



------- Additional Comments From djm at mindrot.org  2002-04-17 12:45 -------
Such failures get logged anyway:

Apr 17 12:45:33 xenon sshd(pam_unix)[21188]: authentication failure;
lognameuid=0 euid=0 tty=NODEVssh ruser= rhost=localhost.localdomain  user=root
Apr 17 12:45:35 xenon sshd[21188]: Failed password for root from 127.0.0.1 port
34002




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=113

peak at argo.troja.mff.cuni.cz changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|WORKSFORME                  |



------- Additional Comments From peak at argo.troja.mff.cuni.cz  2002-04-18
22:40 -------
With all due respect, you should re-read the original report. :) If "such
failures get logged anyway" (*) then that annoying and redundant
log("input_userauth_request: illegal user %s", user) can really go
away (or be
reduced to a debugging message).

(*) Well, whether pam_unix logs them depends on whether the particular
implementation of pam_unix does it and whether pam_unix is used at all but this
is a completely different question.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=113





------- Additional Comments From markus at openbsd.org  2002-04-18 22:50 -------
but the username might not get logged.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=113





------- Additional Comments From markus at openbsd.org  2002-04-18 23:40 -------
hm, permitted users won't get logged in the same case.
not sure whether they should. we could try logging
the username on disconnect. does this make sense?



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=113





------- Additional Comments From peak at argo.troja.mff.cuni.cz  2002-04-19
00:06 -------
Yes, something like "User joedoe disconnected in the middle of
keyboard-interactive authentication." or "Illegal user blahblah
disconnnected..." if the client disconnects during the authentication.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.