1

Duplicate lines in logs

view story
linux-howto

https://bbs.archlinux.org – Some of my logs seem to be logging events 5 times. Logs affected include syslog, errors.log, daemon.log and possibly others.This is an example from auth.log with the private bits cut out.Nov 28 19:14:01 **SERVER** sshd[3952]: Postponed publickey for **USER** from xxx.xxx.xxx.xxx port 3006 ssh2 [preauth] Nov 28 19:14:01 **SERVER** sshd[3952]: Postponed publickey for **USER** from xxx.xxx.xxx.xxx port 3006 ssh2 [preauth] Nov 28 19:14:01 **SERVER** sshd[3952]: Postponed publickey for **USER** from xxx.xxx.xxx.xxx port 3006 ssh2 [preauth] Nov 28 19:14:01 **SERVER** sshd[3952]: Postponed publickey (HowTos)

Tagmego's picture
Submitted by Tagmego on 11/29/2012

Stories similar to Duplicate lines in logs

Hello,

I'm trying to add a user with SFTP and chroot. I fallowed the usual procedure and it seems that the user can ssh and logs in correctly into the server with a rsa key. However, sftp doesn't work at all. The user can connect and gets authorized, but nothing more seems to happen.

The error message I am seeing is:

Failed publickey for raj from 10.30.16.94 port 44953 ssh2 Mar 18 05:22:34 unixbuild sshd[16956]: [ID 800047 auth.info] Failed password for raj from 10.30.16.94 port 44953 ssh2

Connection closed [preauth] 21 weeks 6 days ago

On a Ubuntu 12.04 server, I am getting the following pair of messages in auth.log several times a minute:

Jan 17 22:04:25 binx sshd[14659]: Connection closed by 192.168.0.1 [preauth] Jan 17 22:04:25 binx sshd[14661]: Connection closed by 192.168.0.5 [preauth]

Both those IP addresses belong to separate computers (192.168.0.1 is our firewall/router, 192.168.0.5 is our backup machine), and seem to

Hopefully you guys can help and see if I've done something weird here, I'm trying to log in with a user I set up, FileZilla shows me:

Command: open "///@///" Command: Pass: ******** Status: Connected to /// Error: Connection closed by server with exitcode 1 Error: Could not connect to server

So, I went into auth.log and I see this:

Feb 12 11:08:49 sshd[12056]: Accepted password for /// fr

I recently 'hardened' two Ubuntu servers using Bastille, and now I get permission denied: scp whenever I try to scp files in.

SSH login works fine.

SSHD config in Suse 1 year 10 weeks ago

Hi there

I was wondering, is there anyway I can change the appearance of sshd logs output in /var/log/sshderr.log and /var/log/sshd.log.

Greetings, (moved here from internet/networking, was in the wrong foum)

[ubuntu] SFTP Connection Error 2 years 48 weeks ago

I recently started receiving "SFTP connection error" when I tried to connect from a SFTP client. I was working correctly until a few weeks ago. I am not sure if an update broke my system. I have another system that is pretty much identical even updates, but it has continued to work. I cannot find any helpful info in the logs. Here is a snippet from auth.log:

I have installed likewise-open to authenticate on Active Directory and pam_mount for mounting folders. Now when I logon to local user

Dec 3 17:10:38 ltsp-server3 sshd[8742]: pam_mount(pam_mount.c:364): pam_mount 2.3: entering auth stage Dec 3 17:10:38 ltsp-server3 sshd[8724]: Accepted keyboard-interactive/pam for salman from 10.199.104.45 port 3250 ssh2 Dec 3 17:10:38 ltsp-server3 sshd[8724]: