search for: test_citi

...vs telnet. The only thing I can figure is that telnet traps control-d as User_Exit or USER_Logout and ssh interprets it as EOF. If EOF is triggered, then the auditing subsystem doesnt care. The 'logout' command is only affected if you are NOT logged into the console. ==================== test_citi:/root # grep UseLogin /usr/etc/sshd_config UseLogin no test_citi:/root # tty /dev/pts/0 test_citi:/root # logout 3004-065 You must be on the login terminal. test_citi:/root # ====================== test_citi:/root # grep UseLogin /usr/etc/sshd_config UseLogin no test_citi:/root # tty /dev/vty0 tes...