Displaying 2 results from an estimated 2 matches for "1cust126".
2000 Mar 31
4
anomalous wtmp logging bug
...ce a user authenticates themself to sshd, sshd among other things
records the login in the wtmp, which `last` reads. However, sshd logs
hostnames which are longer than 16 characters instead of IPs like normal
programs would. As a result, I have useless entries such as:
tempest ttyp4 1cust126.tnt5.ta Sat Mar 11 22:33 - 14:03
(15:29)
which there is no way of telling what IP that was from.
One option I found using was the UseLogin option, where openssh
authenticates via login(1). This would work correctly but the wtmp
logging was awkward:
tempest ttyp4 63.10.229.126 Sat...
2000 Mar 13
0
duplicate log entries
...se openssh's UseLogin option (i.e. set it to "Yes").. i get
duplicate entries in the wtmp file (when i type 'last' it displays
users who logged on via sshd twice), like this:
tempest ttyp4 63.10.229.126 Sat Mar 11 22:33 - 14:03 (15:29)
tempest ttyp4 1cust126.tnt5.ta Sat Mar 11 22:33 still logged in
note however that this is AFTER a user has logged off. It shows how
long the user was logged on in the first entry (the one by login(1)) and
correctly logs only the IP address.
However, sshd STILL logged the entry, incorrectly i might add, saying the
us...