[CentOS] [Q] SSH have two entries on /var/log/secure on CENTOS 4.4???

Will McDonald wmcdonald at gmail.com
Wed Feb 28 23:07:56 UTC 2007


On 28/02/07, mcclnx mcc <mcclnx at yahoo.com.tw> wrote:
> We have CENTOS 4.4 on DELL server.  I found if I login
> use 'ssh" ther will have two entries on
> /var/log/secure.  One entry use local time and another
> entry use "green witch time,. (I guess).
>
> It ONLY happen on ssh.  Telnet, FTP and Sftp no
> problem.
>
> Does any one know why?
>
> Feb 28 14:01:20 ORA04 sshd[24338]: Accepted password
> for oracle from ::ffff:172.29.94.230 port 34470 ssh2
> Feb 28 19:01:20 ORA04 sshd[24339]: Accepted password
> for oracle from ::ffff:172.29.94.230 port 34470 ssh2
> Feb 28 20:48:26 ORA04 sshd[24533]: Accepted password
> for oracle from ::ffff:172.30.10.141 port 2459 ssh2
> Feb 28 15:48:26 ORA04 sshd[24532]: Accepted password
> for oracle from ::ffff:172.30.10.141 port 2459 ssh2
> Feb 28 16:06:02 ORA04 xinetd[5007]: START: telnet
> pid=24624 from=172.30.11.243
> Feb 28 17:41:25 ORA04 sshd[24969]: Accepted password
> for oracle from ::ffff:172.30.11.245 port 47048 ssh2
> Feb 28 17:41:25 ORA04 sshd[24971]: subsystem request
> for sftp

This sounds like an old problem that cropped up with SSH and logging a
while back.

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=203671

http://lists.centos.org/pipermail/centos/2006-November/072477.html

Is your sshd package up to date?

Will.



More information about the CentOS mailing list