On 15/11/06, David Mackintosh <David.Mackintosh at xdroop.com> wrote: > Hi folks, > > while chasing down a logging-related situation, I happened to notice > that when I connect via ssh to my system it makes the following logs: > > Nov 15 14:15:39 saturn sshd[29868]: Accepted password for dave from ::ffff:10.0.10.14 port 2833 ssh2 > Nov 15 09:15:39 saturn sshd[29867]: Accepted password for dave from ::ffff:10.0.10.14 port 2833 ssh2 > Nov 15 09:15:39 saturn sshd(pam_unix)[29869]: session opened for user dave by (uid=0) > > That is, sshd appears to log the connection with GMT (or UCT) before > the child sshd logs it with local time. What do you have set in /etc/sysconfig/clock for ZONE= and UTC= ? Does changing UTC= change the logging behaviour? Will.