On 15/11/06, David Mackintosh David.Mackintosh@xdroop.com wrote:
Hi folks,
while chasing down a logging-related situation, I happened to notice that when I connect via ssh to my system it makes the following logs:
Nov 15 14:15:39 saturn sshd[29868]: Accepted password for dave from ::ffff:10.0.10.14 port 2833 ssh2 Nov 15 09:15:39 saturn sshd[29867]: Accepted password for dave from ::ffff:10.0.10.14 port 2833 ssh2 Nov 15 09:15:39 saturn sshd(pam_unix)[29869]: session opened for user dave by (uid=0)
That is, sshd appears to log the connection with GMT (or UCT) before the child sshd logs it with local time.
What do you have set in /etc/sysconfig/clock for ZONE= and UTC= ? Does changing UTC= change the logging behaviour?
Will.