Re: RSSH logging

[Derek M. <co...@pi...>]

On Fri, Apr 20, 2007 at 11:35:54PM -0400, Marc Racette wrote:
> I have been trying to determine a method by which user sftp sessions can
> be logged.  I have successfully implemented logging of the sftp-server
> service, and this seems to work fine when a user's shell is bash.

As long as your chroot jail is configured properly so that logging
works *when using chroot jails*, there's nothing else to do.  Logging
of sftp is handled entirely by sftp, so if you managed to implement
that, and your jail is set up correctly, logging should just work.
There's truly nothing magical about rssh's logging, and it should in
no way affect sftp's logging, though if your jail is not configured
properly, the syslog libraries will not be able to write to the
syslog (because the socket it needs is not inside the jail).

The rssh docs do describe in great detail how to set up logging
properly inside chroot jails *on Linux*... if you're using some other
OS, the same idea applies, but you'll need to read your syslog
documentation for specific details.  On some platforms, it may not be
possible at all.

HTH

-- 
Derek D. Martin
http://www.pizzashack.org/
GPG Key ID: 0x81CFE75D