Cygwin_openssh logging

Login or Register to Reply

Thread Tools Search this Thread
# 1  
Cygwin_openssh logging

Has anyone enabled Logging on cygwin_openssh? I uncommented Syslogfacility AUTH and loglevel VERBOSE in sshd_config, restarted but I still have not seen any logging???

Thanks in advance!

Moderator's Comments:
Mod Comment Please use CODE tags as required by forum rules!

Last edited by RudiC; 11-08-2016 at 08:47 AM.. Reason: Added ICODE tags.
# 2  
Do you see /etc/passwd in your cygwin file system? In other words, "who" does the authentication? Windows or cygwin? See the mkpasswd --help for more information.

mkpasswd indicates that, by default, Windows authenticates. You can force cygwin to authenticate. Never done it myself.
# 4  
Ok try:
find /etc -name auth.log

You will see ssh logging there. Next question: what do you want to see? That can be more interesting....
# 5  
there is no /etc/ auth.log. so all I get is Windows Auditing which shows cyg_server failed.. doesnt really tell me who...
Do I need to touch it??
# 6  
I'm confused. What problem are you trying to solve?
For example from the cygwin forums:
Sshd (the daemon) logs by default on the Windows Event Application list, this
can be changed in the configuration (/etc/sshd_config) so that it can log using
syslog (a separate package not installed by default).

It also logs to wtmp, you can see who loged in and from where but entries are
not distinguishable from telnet/ftp/or any other logins.

One example of failed login in the event log (very common when somebody tries to
"break" into your computer) is (6 events):

The description for Event ID ( 0 ) in Source ( sshd ) cannot be found. The local
computer may not have the necessary registry information or message DLL files to
display messages from a remote computer. You may be able to use the /AUXSOURCE=
flag to retrieve this description; see Help and Support for details. The
following information is part of the event: sshd : PID 2868 : Invalid user lidia
If so, search the site for your problem. I am not an expert on cygwin authentication and logging. It is somewhat unlike other unixes.
# 7  
my problem too.. 20+ years in UNIX but cygwin_openssh on windows? LOL.. about 3 months...

Only logging I seem to be getting is thru Windows and again all I see there is cyg_server failed to login.. doesnt really say who the user is..
Login or Register to Reply

Thread Tools Search this Thread
Search this Thread:
Advanced Search

More UNIX and Linux Forum Topics You Might Find Helpful
Cygwin_openssh time stamps
I've installed cygwin_openssh on Windows 2012 R2 and it's working great. My issue is when a file is uploaded say from a different timezone, when it is uploaded, it doesnt pick up the sftp servers time.. Is there a way to fix that? i.e. When someone in PST uploads a file to this server in EST,...... Windows & DOS: Issues & Discussions
Windows & DOS: Issues & Discussions
Syslog not logging successful logging while unlocking server's console
When unlocking a Linux server's console there's no event indicating successful logging Is there a way I can fix this ? I have the following in my rsyslog.conf /var/log/secure /var/log/secure... Linux
Constant Logging In (After Logging Out)
Hi Everyone. First, I want to thank all of you for letting me participate in this great group. I am having a bit of a problem. After I get an email from a responder, I login to make my reply. In the mean time I get another response by email from another member, I go to reply to them and I...... Post Here to Contact Site Administrators and Moderators
Post Here to Contact Site Administrators and Moderators
Asking about logging in
Hi, just wriiten a sh script and as my script will try to log into another server to delete some files but when i run , it keeps on saying that my files do not exist. It seems to refer to my local directory instead. Below is my script : FTP_HOST=ip_number FTP_USER="user password" ...... UNIX for Dummies Questions & Answers
UNIX for Dummies Questions & Answers
logging when someone changes to su
Is there a file that captures info whenever someone logs to su? i know it comes across as standard output on the server, but is it saved anywhere? Time and date info included?? thanks, kym... UNIX for Dummies Questions & Answers
UNIX for Dummies Questions & Answers

Featured Tech Videos