David Mackintosh wrote:
Hi folks,
while chasing down a logging-related situation, I happened to notice that when I connect via ssh to my system it makes the following logs:
Nov 15 14:15:39 saturn sshd[29868]: Accepted password for dave from ::ffff:10.0.10.14 port 2833 ssh2 Nov 15 09:15:39 saturn sshd[29867]: Accepted password for dave from ::ffff:10.0.10.14 port 2833 ssh2 Nov 15 09:15:39 saturn sshd(pam_unix)[29869]: session opened for user dave by (uid=0)
That is, sshd appears to log the connection with GMT (or UCT) before the child sshd logs it with local time.
How do I either tell sshd to always use local time, or tell it not to make the first entry?
That is a bug. See http://bugs.centos.org/view.php?id=1557 and the RedHat bugzilla entry which is referenced in that bug report.
Cheers,
Ralph