Unix/Linux Go Back    


Windows & DOS: Issues & Discussions All Windows and DOS questions should go here as well. Discuss UNIX to Windows (Desktop or Server) here!

Cygwin_openssh logging

Windows & DOS: Issues & Discussions


Closed    
 
Thread Tools Search this Thread Display Modes
    #1  
Old Unix and Linux 11-08-2016
MikeAdkins MikeAdkins is offline
Registered User
 
Join Date: Nov 2016
Last Activity: 8 November 2016, 8:15 AM EST
Posts: 5
Thanks: 0
Thanked 0 Times in 0 Posts
Cygwin_openssh logging

Has anyone enabled Logging on cygwin_openssh? I uncommented Syslogfacility AUTH and loglevel VERBOSE in sshd_config, restarted but I still have not seen any logging???

Thanks in advance!


Moderator's Comments:
Cygwin_openssh logging Please use CODE tags as required by forum rules!

Last edited by RudiC; 11-08-2016 at 07:47 AM.. Reason: Added ICODE tags.
Sponsored Links
    #2  
Old Unix and Linux 11-08-2016
jim mcnamara jim mcnamara is offline Forum Staff  
...@...
 
Join Date: Feb 2004
Last Activity: 24 June 2017, 11:32 AM EDT
Location: NM
Posts: 11,091
Thanks: 536
Thanked 1,067 Times in 989 Posts
Do you see /etc/passwd in your cygwin file system? In other words, "who" does the authentication? Windows or cygwin? See the mkpasswd --help for more information.

mkpasswd indicates that, by default, Windows authenticates. You can force cygwin to authenticate. Never done it myself.
Sponsored Links
    #3  
Old Unix and Linux 11-08-2016
MikeAdkins MikeAdkins is offline
Registered User
 
Join Date: Nov 2016
Last Activity: 8 November 2016, 8:15 AM EST
Posts: 5
Thanks: 0
Thanked 0 Times in 0 Posts
yes / etc/passwd exists. and authenticates.

Last edited by MikeAdkins; 11-08-2016 at 07:53 AM..
    #4  
Old Unix and Linux 11-08-2016
jim mcnamara jim mcnamara is offline Forum Staff  
...@...
 
Join Date: Feb 2004
Last Activity: 24 June 2017, 11:32 AM EDT
Location: NM
Posts: 11,091
Thanks: 536
Thanked 1,067 Times in 989 Posts
Ok try:
Code:
find /etc -name auth.log

You will see ssh logging there. Next question: what do you want to see? That can be more interesting....
Sponsored Links
    #5  
Old Unix and Linux 11-08-2016
MikeAdkins MikeAdkins is offline
Registered User
 
Join Date: Nov 2016
Last Activity: 8 November 2016, 8:15 AM EST
Posts: 5
Thanks: 0
Thanked 0 Times in 0 Posts
there is no /etc/ auth.log. so all I get is Windows Auditing which shows cyg_server failed.. doesnt really tell me who...
Do I need to touch it??
Sponsored Links
    #6  
Old Unix and Linux 11-08-2016
jim mcnamara jim mcnamara is offline Forum Staff  
...@...
 
Join Date: Feb 2004
Last Activity: 24 June 2017, 11:32 AM EDT
Location: NM
Posts: 11,091
Thanks: 536
Thanked 1,067 Times in 989 Posts
I'm confused. What problem are you trying to solve?
For example from the cygwin forums:
Quote:
Sshd (the daemon) logs by default on the Windows Event Application list, this
can be changed in the configuration (/etc/sshd_config) so that it can log using
syslog (a separate package not installed by default).

It also logs to wtmp, you can see who loged in and from where but entries are
not distinguishable from telnet/ftp/or any other logins.

One example of failed login in the event log (very common when somebody tries to
"break" into your computer) is (6 events):

The description for Event ID ( 0 ) in Source ( sshd ) cannot be found. The local
computer may not have the necessary registry information or message DLL files to
display messages from a remote computer. You may be able to use the /AUXSOURCE=
flag to retrieve this description; see Help and Support for details. The
following information is part of the event: sshd : PID 2868 : Invalid user lidia
from 61.129.117.112.
If so, search the cygwin.com site for your problem. I am not an expert on cygwin authentication and logging. It is somewhat unlike other unixes.
Sponsored Links
    #7  
Old Unix and Linux 11-08-2016
MikeAdkins MikeAdkins is offline
Registered User
 
Join Date: Nov 2016
Last Activity: 8 November 2016, 8:15 AM EST
Posts: 5
Thanks: 0
Thanked 0 Times in 0 Posts
my problem too.. 20+ years in UNIX but cygwin_openssh on windows? LOL.. about 3 months...

Only logging I seem to be getting is thru Windows and again all I see there is cyg_server failed to login.. doesnt really say who the user is..
Sponsored Links
Closed

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Linux More UNIX and Linux Forum Topics You Might Find Helpful
Thread Thread Starter Forum Replies Last Post
Cygwin_openssh time stamps MikeAdkins Windows & DOS: Issues & Discussions 0 11-08-2016 07:19 AM
Syslog not logging successful logging while unlocking server's console walterthered Linux 1 03-22-2015 08:57 AM
Constant Logging In (After Logging Out) Ccccc Post Here to Contact Site Administrators and Moderators 6 03-02-2010 09:35 AM
logging The Fridgerator Security 5 08-20-2002 06:12 AM
Logging Aussie_Bloke Shell Programming and Scripting 4 05-29-2002 02:20 PM



All times are GMT -4. The time now is 01:30 PM.