PDA

View Full Version : OpenSSH not logging who is online

asterisk
04-22-2006, 03:22 PM
Is anybody else experiencing this?

I'm currently having openssh3.9p1-8.RHEL4.12, the one installed via yum along with openssh-clients and openssh-server packages dependencies.

Whenever I log online and do a who or finger, I get the message no one is online.
DavidP
04-22-2006, 10:20 PM
We have identified this problem as affecting several nodes earlier today. SSHD is not logging to wtmp as it should be.

Charles has opened a ticket with SWSoft on the matter.
asterisk
04-24-2006, 11:55 AM
Hi,

Thank you for the note.

Just to add, Athira has been very kind in overseeing the OpenSSH/OpenSSL installation and after her wonderful guidance, I am very happy to say that this bug has been resolved with the installation of the later OpenSSH version, 4.3p2.

After some time spent on this, I had to choose to upgrade to 4.3 instead of staying at 3.9 with the given instructions in hopes of dissolving the bug. Hopefully this will be helpful for the other nodes, without having to go through SW-Soft.
ashokjp
05-14-2006, 01:58 PM
try this

nano /etc/ssh/sshd_config
and add the following to the bottom of the file and save:
# Custom Config
UsePAM no
UseLogin yes
Fred
05-14-2006, 08:02 PM
ohhh... i though it was a new weird and obscure security features... I saw this long time ago... i mean, this problem on my node for at least a month... if not two :)
ashokjp
05-14-2006, 08:52 PM
Did you try what i pasted ?
asterisk
05-16-2006, 04:01 AM
ohhh... i though it was a new weird and obscure security features... I saw this long time ago... i mean, this problem on my node for at least a month... if not two

Lol! Yes, demigod superusers lurking in the background were appreciative of this new feature enabling them to harrass poor unsuspecting users. :p

try this

nano /etc/ssh/sshd_config
and add the following to the bottom of the file and save:
# Custom Config
UsePAM no
UseLogin yes

Nice tip ashokjp, but I think that's just a temporary workaround right? Besides, I understand UseLogin had some security vulnerabilities back then probably why OpenSSH by default disabled that.

Probably easier to just upgrade the whole shebang and avoid anything untoward. ;)