On Wed, Nov 15, 2006 at 12:34:48PM -0500, Michael Velez wrote:
That is, sshd appears to log the connection with GMT (or UCT) before the child sshd logs it with local time.
A hard link between /var/empty/sshd/etc/localtime to /etc/localtime changes the timestamp, although two messages still get reported.
This corrected the time issue. I can live with the double-reporting.
Thanks!