search for: lastb

Hello All, We have a sensitive network where users authenticates through SSH. We support multiple authentications with respective to their groups . As a security concern we continue to monitor failed or bad login attempts of every user using lastb command, but SSH never logs the bad login attempts of the user like telnet does . We would like to have this feature on SSH for every supported authentication including key based authentication like public key and host based authentications. We have a patch that logs bad login attempt through pass...

...net section. All this including the ssh-agent mechanism. The command is like: hendl at server > ssh -t host_a ssh -t firewall ssh -t host_b This procedere works fine, but on the host firewall I am disabled after an couple of conncetions because of too many unseccesful logins. Unfortunately the lastb command says nothing and in fact I didn't login to that machine, I used it only as an gateway. The syslog.log tells: sshd [xxx] Accepted rsa for hendl from a.b.c.d port 52166 sshd [xxx] Accepted rsa for hendl from a.b.c.d port 52167 sshd [xxx] Accepted rsa for hendl from a.b.c.d port 52168 ssh...

...s. Syslog has lots of entries like: Aug 29 02:23:31 otso sshd[21000]: reverse mapping checking getaddrinfo for powered.by.e-leven.be [78.110.207.104] failed - POSSIBLE BREAK-IN ATTEMPT! Aug 29 02:23:31 otso sshd[21000]: Invalid user upload from 78.110.207.104 and these also show as multiple 'lastb' entries in btmp: upload ssh:notty 78.110.207.104 Wed Aug 29 02:23 - 02:23 (00:00) upload ssh:notty 78.110.207.104 Wed Aug 29 02:23 - 02:23 (00:00) upload ssh:notty 78.110.207.104 Wed Aug 29 02:23 - 02:23 (00:00) upload ssh:notty 78.110.207.104 Wed Aug 29 02:23 -...

...upports utmps/btmps/wtmps structure and related files for login purpose instead of utmp/btmp/wtmp. Since openssh has been written to support utmp struture, it ignores utmps/btmps/wtmps and it's related files. So commands that support utmp/btmp/wtmp database, for example logname,who - [],last,lastb commands, do not work in 11.23 platform. So, Can openssh be enhanced to support utmps/btmps/wtmps ? ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

I am a rank newbie to Linux and wine. I am running Ubuntu Dapper on an AMD 1800 mhz machine, wine 0.9.15 Everything I have read says use the installer to load windows programs. Where is the installer? Thanks, -- Ron Thompson On the Beautiful Florida Space Coast, right beside the Kennedy Space Center, USA http://www.plansandprojects.com My hobby pages are here:

(Sorry, third time -- last one, promise, just giving it a subject line!) OK, a second machine hosted at the same hosting company has also apparently been hacked. Since 2 of out of 3 machines hosted at that company have now been hacked, but this hasn't happened to any of the other 37 dedicated servers that I've got hosted at other hosting companies (also CentOS, same version or almost),