sshd time in /var/log/secure

Richard Riley rriley at procuri.com
Tue Apr 3 03:47:54 UTC 2007


It appears that since I updated my machines with the new tzdata, ssh
logins are logged with two entries in the /var/log/secure file.  One
appears to be UTC while the other is correct local time.  This is
consistent with both RHEL ES3 and ES4.  I have applied subsequent tzdata
and openssh updates and rebooted the machines and still get the double
entries.  I can find no instances in any other log files.

Mar  6 16:11:08 admin4 sshd[16822]: Accepted password for rriley from
::ffff:172.29.1.193 port 1557 ssh2
Mar  6 11:11:08 admin4 sshd[16821]: Accepted password for rriley from
::ffff:172.29.1.193 port 1557 ssh2

Mar  6 17:12:15 admin4 sshd[21665]: Accepted password for rriley from
::ffff:172.29.1.196 port 4418 ssh2
Mar  6 12:12:15 admin4 sshd[21664]: Accepted password for rriley from
::ffff:172.29.1.196 port 4418 ssh2

Apr  3 03:24:42 admin4 sshd[12422]: Accepted password for rriley from
172.30.3.131 port 3502 ssh2
Apr  2 23:24:42 admin4 sshd[12421]: Accepted password for rriley from
172.30.3.131 port 3502 ssh2


Richard Riley
IT System Administrator






More information about the redhat-sysadmin-list mailing list