UNIX for Advanced & Expert Users

Aug 14 14:21:46 isau02 sshd[26012]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=wsvu2388  user=tester
Aug 14 14:21:48 isau02 sshd[26012]: Failed password for tester from 10.xx.xx.xx port 1769 ssh2
Aug 14 14:21:49 isau02 sshd[26012]: Accepted password for tester from 10.xx.xx.xx port 1769 ssh2
Aug 14 14:21:49 isau02 sshd[26014]: (pam_unix) session opened for user tester by (uid=0)
Aug 14 14:21:51 isau02 sshd[26014]: (pam_unix) session closed for user tester

find /var -type f -exec grep -l " tt " {} \;

root@somewhere:~# ssh -v tt@localhost -p 2222

OpenSSH_4.3p2 Debian-9etch2, OpenSSL 0.9.8c 05 Sep 2006
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Connecting to localhost [127.0.0.1] port 2222.
debug1: Connection established.
debug1: permanently_set_uid: 0/0
debug1: identity file /root/.ssh/identity type -1
debug1: identity file /root/.ssh/id_rsa type -1
debug1: identity file /root/.ssh/id_dsa type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_4.3p2 Debian-9etch2
debug1: match: OpenSSH_4.3p2 Debian-9etch2 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_4.3p2 Debian-9etch2
debug1: An invalid name was supplied
Configuration file does not specify default realm

debug1: An invalid name was supplied
A parameter was malformed
Validation error

debug1: An invalid name was supplied
Configuration file does not specify default realm

debug1: An invalid name was supplied
A parameter was malformed
Validation error

debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'localhost' is known and matches the RSA host key.
debug1: Found key in /root/.ssh/known_hosts:3
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password
debug1: Next authentication method: publickey
debug1: Trying private key: /root/.ssh/identity
debug1: Trying private key: /root/.ssh/id_rsa
debug1: read PEM private key done: type RSA
debug1: Authentications that can continue: publickey,password
debug1: Trying private key: /root/.ssh/id_dsa
debug1: Next authentication method: password
tt@localhost's password:
Connection closed by 127.0.0.1

Aug 14 16:42:39 somewhere passwd[18923]: (pam_unix) password changed for tt
Aug 14 16:42:39 somewhere passwd[18923]: (pam_unix) Password for tt was changed
Aug 14 16:42:44 somewhere pam_access[18928]: access denied for user `tt' from `localhost'
Aug 14 16:42:44 somewhere sshd[18928]: Failed password for tt from 127.0.0.1 port 40627 ssh2