auth.log/secure missing rhost ++
kenshin33 opened this issue · 2 comments
kenshin33 commented
I noticed that resulting logs in /var/log/auth.log on debian (9) system rhost is missing,m like so:
Feb 9 16:48:57 hostname ker process: pam_krb5(nginx:auth): authentication failure; logname=asd uid=33 euid=33 tty= ruser= rhost=
in contrast a failed ssh login yields this :
Feb 8 09:33:06 hostname sshd[14194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=X.X.X.X user=root
which is very useful for a system like fail2ban!
sbraz commented
This may help: you'll see auth failures in nginx's error log with it.