I just installed Debian 6 on my server and noticed that sshd isn't writing any log to /var/log. I understand this is a huge security issue as I won't be able to know who logged in to my server. Is there anyway to fix this?
If you haven't changed this in /etc/ssh/sshd_config, you should be getting sshd log information in /var/log/auth.log. You'll also see messages here from pam and sudo, so all access information is logged in the same place.
By default, sshd's
SyslogFacilityis set toAUTH.If you haven't changed this in
/etc/ssh/sshd_config, you should be getting sshd log information in/var/log/auth.log. You'll also see messages here from pam and sudo, so all access information is logged in the same place.