OpenSSH logging with GMT on Connection close?

Kevin D. Clark kevin_d_clark at comcast.net
Tue Aug 19 10:11:46 EDT 2008


Bill McGonigle writes:

> I've got a Fedora 8 machine here running sshd (OpenSSH_4.7p1, OpenSSL  
> 0.9.8b 04 May 2006) and when it closes a connection, it reports in / 
> var/log/secure a timestamp that's in GMT rather than in localtime:
> 
>    Aug  7 17:45:31 sshhost sshd[22039]: pam_unix(sshd:session):  
> session closed for user userone
>    Aug  7 21:49:04 sshhost sshd[22092]: Connection closed by  
> 192.168.1.123
>    Aug  7 17:54:57 sshhost sshd[22588]: Accepted publickey for  
> usertwo from 192.168.1.123 port 52016 ssh2

This is a really weird problem.  I UTSL'd through the openssh-5.0p1
code and I don't see any interesting differences between the
login/logout code that uses syslog.

I thought about this quite a bit during my commute this morning and my
best guess is that this might have something to do with how the TZ
enviroment variable is configured in your environment?

If you are using syslog-ng, does using use_time_recvd help?

Regards,

--kevin
-- 
GnuPG ID: B280F24E                Meet me by the knuckles
alumni.unh.edu!kdc                of the skinny-bone tree.
http://kdc-blog.blogspot.com/     -- Tom Waits


More information about the gnhlug-discuss mailing list