Visit Our UNIX and Linux User Community


Removing "Failed none for" error messages from sshd logs files


 
Thread Tools Search this Thread
Operating Systems Solaris Removing "Failed none for" error messages from sshd logs files
# 1  
Old 11-15-2009
Removing "Failed none for" error messages from sshd logs files

We have a number of system running the same patch level, OS version and sshd version. The systems also have the same sshd config and syslog.conf entries , however one of the systems keeps logging the following message everytime someone logs in:

Nov 16 09:36:02 server389 sshd[22753]: [ID 800047 local2.notice] Failed none for jonesh from 10.2.79.221 port 1364 ssh2

Running Solaris 5.10 Generic_139555-08 and sshd version SSH-2.0-Sun_SSH_1.1.1

anyone know how to stop sshd from logging the "failed none for" messages for every ssh login?

The strange thing is this is only occuring on one system that has the same config as all the other that are not logging this message.
# 2  
Old 11-15-2009
I have no idea what your problem is but if the want to work around then can try this old hack by removing the message and replacing with something else. May cause instability so backup all the binaries first.

The originator was Perderabo, I just field tested it.

https://www.unix.com/302168538-post16.html
How to hide SSH version
# 3  
Old 11-15-2009
The problem is this log entry is generated everytime someone successfully logs in:

Nov 16 09:36:02 server389 sshd[22753]: [ID 800047 local2.notice] Failed none for jonesh from 10.2.79.221 port 1364 ssh2

This causes logsurfer to send of 100's of e-mails every day.

How can sshd be stopped from logging this message?

This only occurs on one server - the other server have the same log level config, sshd config, pam config, sshd version etc. so its odd that only this system is logging these messages.

---------- Post updated at 11:14 AM ---------- Previous update was at 11:13 AM ----------

thanks - I will have a look.


Quote:
Originally Posted by sparcguy
I have no idea what your problem is but if the want to work around then can try this old hack by removing the message and replacing with something else. May cause instability so backup all the binaries first.

The originator was Perderabo, I just field tested it.

https://www.unix.com/302168538-post16.html
How to hide SSH version
# 4  
Old 04-21-2010
"failed none for" error in syslog

I was wondering if Mr. Webster was able to resolve his problem with the "failed none for" messages filling syslog everytime someone successfully authenticates. I'm having the same issue.

Previous Thread | Next Thread
Test Your Knowledge in Computers #569
Difficulty: Medium
foreach loops are considered syntactic sugar.
True or False?

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

SSHd is running, but cant connect "Network error: Connection refused"

Hi, i checked on rhel VPS is running sshd (service ssh status) But i cant connect via putty: "Network error: Connection refused" Please which log file in my centos rhel linux i need to watch or what are steps to do to discover cause? (3 Replies)
Discussion started by: postcd
3 Replies

2. Solaris

"Estream construct failed" Error on Solaris i86pc

Hi Guys, From past some days, I am getting an error in /var/adm/messages which is as shown below. XXXXX02:/# cat /var/adm/messages |tail Sep 16 15:28:14 XXXX02 EV_AGENT: Agent Main --Estream construct failed. Err: EMULSocket::recv() Sep 16 15:31:49 XXXX02 EV_AGENT: Agent main --... (2 Replies)
Discussion started by: vivek.goel.piet
2 Replies

3. Shell Programming and Scripting

Perl failure with "main::$fn" used only once:" in error logs

Hi all, Can anyone guess why this is happening? I am new to Perl, so please help me to fix this error: - I have a static html file which calls the cgi-perl script. HTML Code: <html> <head> <title> Hey Dude! </title> </head> <body> <form method="POST"... (3 Replies)
Discussion started by: bashily
3 Replies

4. Shell Programming and Scripting

Removing "^M" from the end of a String (i.e. "Ctrl+M")?

Hello All, I have an Expect script that ssh's to a remote server and runs some commands before exiting. One of the commands I run is the "hostname" Command. After I run this command I save the output using this line in the code below... Basically it executes the hostname command, then I... (2 Replies)
Discussion started by: mrm5102
2 Replies

5. Shell Programming and Scripting

awk command to replace ";" with "|" and ""|" at diferent places in line of file

Hi, I have line in input file as below: 3G_CENTRAL;INDONESIA_(M)_TELKOMSEL;SPECIAL_WORLD_GRP_7_FA_2_TELKOMSEL My expected output for line in the file must be : "1-Radon1-cMOC_deg"|"LDIndex"|"3G_CENTRAL|INDONESIA_(M)_TELKOMSEL"|LAST|"SPECIAL_WORLD_GRP_7_FA_2_TELKOMSEL" Can someone... (7 Replies)
Discussion started by: shis100
7 Replies

6. Red Hat

"ERROR : failed to mount nfs source" Red Hat Kickstart

Hi There, I have been googling for this error and try solution provided but still not avail to resolve Kickstart Issue. Any expert have encounter this problem? Thanks. Regards, Regmaster (4 Replies)
Discussion started by: regmaster
4 Replies

7. AIX

Ssh installation error "RSA key generation failed"

While trying to upgrade ssh from v4.7 to v5.0 on AIX 5.3 TL9, I end up with the following error. Has anyone come across this? Note: openssl has been upgraded to 0.9.8.840 before this upgrade Bala (0 Replies)
Discussion started by: balaji_prk
0 Replies

8. Solaris

"lpr.error] Warning: Received SIGPIPE" continuously appearing in logs

On a Solaris 8 print server we're continuously (every 2 minutes or so) getting these messages in the logs: printd: Warning: Received SIGPIPE; continuing I've applied this patch and restarted the printd daemon, but it doesn't help: #109320-22: SunOS 5.8: lp patch Does anyone have any idea what... (4 Replies)
Discussion started by: aussieos
4 Replies

9. UNIX for Dummies Questions & Answers

Command 'rm -f -r "0yfOYy-0008Nq-2j-32233-K"' failed with return code 1 and error mes

I would like to know what means this error and how to fix it Command 'rm -f -r "0yfOYy-0008Nq-2j-32233-K"' failed with return code 1 and error message Thank you (3 Replies)
Discussion started by: linuxbee
3 Replies

10. Filesystems, Disks and Memory

Removing ".nfs" files

Hello, I have a critical client-server application. I try to import a file from the local machine on to the server and open it (on the server). I can open it, but after this, when i try to open some other file on the server itself without saving this imported file, a .nfs file is being created.... (1 Reply)
Discussion started by: Jayathirtha
1 Replies

Featured Tech Videos