OpenSSH logging with GMT on Connection close?
Kevin D. Clark
kevin_d_clark at comcast.net
Tue Aug 19 10:11:46 EDT 2008
Bill McGonigle writes:
> I've got a Fedora 8 machine here running sshd (OpenSSH_4.7p1, OpenSSL
> 0.9.8b 04 May 2006) and when it closes a connection, it reports in /
> var/log/secure a timestamp that's in GMT rather than in localtime:
>
> Aug 7 17:45:31 sshhost sshd[22039]: pam_unix(sshd:session):
> session closed for user userone
> Aug 7 21:49:04 sshhost sshd[22092]: Connection closed by
> 192.168.1.123
> Aug 7 17:54:57 sshhost sshd[22588]: Accepted publickey for
> usertwo from 192.168.1.123 port 52016 ssh2
This is a really weird problem. I UTSL'd through the openssh-5.0p1
code and I don't see any interesting differences between the
login/logout code that uses syslog.
I thought about this quite a bit during my commute this morning and my
best guess is that this might have something to do with how the TZ
enviroment variable is configured in your environment?
If you are using syslog-ng, does using use_time_recvd help?
Regards,
--kevin
--
GnuPG ID: B280F24E Meet me by the knuckles
alumni.unh.edu!kdc of the skinny-bone tree.
http://kdc-blog.blogspot.com/ -- Tom Waits
More information about the gnhlug-discuss
mailing list