Question on security..

[Tim Clewlow]

--- Richard Bates <bates at telehouse.com> wrote:

> I know login failures are logged in /var/log/auth.log
> 
> is there a way to log the login of users in this log
> say something like
> 
> Jan 15 10:59:00 MyServer sshd[91869]: User bates authenticated from  
> 172.18.1.139
> Jan 15 10:59:00 MyServer sshd[91869]: User bates Disconnected from  
> 172.18.1.139
> 
> ================================
> === Richard Bates
> === TELEHOUSE America
> ================================
> 

Hello, login successes are also logged in /var/log/auth.log - if you just want
to see the successful ssh logins, then do:

# cat /var/log/auth.log | grep -e "ssh.*Accept"

If you want to see a list of currently logged in users, then do:

# who

Cheers, Tim.


      ____________________________________________________________________________________
Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/newsearch/category.php?category=shopping