sshd time in /var/log/secure
Richard Riley
rriley at procuri.com
Tue Apr 3 03:47:54 UTC 2007
It appears that since I updated my machines with the new tzdata, ssh
logins are logged with two entries in the /var/log/secure file. One
appears to be UTC while the other is correct local time. This is
consistent with both RHEL ES3 and ES4. I have applied subsequent tzdata
and openssh updates and rebooted the machines and still get the double
entries. I can find no instances in any other log files.
Mar 6 16:11:08 admin4 sshd[16822]: Accepted password for rriley from
::ffff:172.29.1.193 port 1557 ssh2
Mar 6 11:11:08 admin4 sshd[16821]: Accepted password for rriley from
::ffff:172.29.1.193 port 1557 ssh2
Mar 6 17:12:15 admin4 sshd[21665]: Accepted password for rriley from
::ffff:172.29.1.196 port 4418 ssh2
Mar 6 12:12:15 admin4 sshd[21664]: Accepted password for rriley from
::ffff:172.29.1.196 port 4418 ssh2
Apr 3 03:24:42 admin4 sshd[12422]: Accepted password for rriley from
172.30.3.131 port 3502 ssh2
Apr 2 23:24:42 admin4 sshd[12421]: Accepted password for rriley from
172.30.3.131 port 3502 ssh2
Richard Riley
IT System Administrator
More information about the redhat-sysadmin-list
mailing list