ML wrote:
Does anyone have thoughts on how to kick off an e-mail on SSH login?
-Jason
If you don't mind making the jump to syslog-ng it's fairly simple to filter ssh login lines to an external script that sends out emails. With stock syslog you could log auth to a named pipe and slurp that up with a similar script.
That said, hooking into pam as has been suggested sounds like the best bet.