[CentOS] sshd logging with GMT times?

David Mackintosh

David.Mackintosh at xdroop.com
Wed Nov 15 14:21:55 UTC 2006


Hi folks,

while chasing down a logging-related situation, I happened to notice
that when I connect via ssh to my system it makes the following logs:

Nov 15 14:15:39 saturn sshd[29868]: Accepted password for dave from ::ffff:10.0.10.14 port 2833 ssh2
Nov 15 09:15:39 saturn sshd[29867]: Accepted password for dave from ::ffff:10.0.10.14 port 2833 ssh2
Nov 15 09:15:39 saturn sshd(pam_unix)[29869]: session opened for user dave by (uid=0)

That is, sshd appears to log the connection with GMT (or UCT) before
the child sshd logs it with local time.  

This is messing up one of my reporting processes, since I have
syslog-ng configured to produce a new file for every day, and at the
end of the day I try to scan the newest file for the day's events. 
So if I ssh to the system after 7PM local time, the "newest" file is
the one from "tomorrow" which has the GMT timestamped entries, not
the entries from today.  

How do I either tell sshd to always use local time, or tell it not to
make the first entry?  

-- 
 /\oo/\
/ /()\ \ David Mackintosh | Public Key: 
         dave at xdroop.com  | http://www.xdroop.com/dave/gpg.html
         $ gpg --recv-keys --keyserver subkeys.pgp.net 4C032504
         Mystery attachment?  http://wiki.xdroop.com/space/GPG
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.centos.org/pipermail/centos/attachments/20061115/f35b0046/attachment.sig>


More information about the CentOS mailing list