Last login info after logged via ssh

[Szpak]

Hi,

After install Fedora 1 on my server I can't see "Last login" message after logged via ssh. In RH 7.3 there was no problem with this. I see this message when log lacally.
In sshd_config there is PrintLastLogin Yes.

Maybe someone can help me?
Szpak

[Jman]

Strange. The last logged on doesn't work for me either. It works on my old Redhat 7.3 server as well. I even logged in to the remote RH7.3 machine to log in remotely to my Fedora machine. :eek:

Tried uncommenting PrintLastLog /etc/ssh/sshd_config, but that did not work.

Maybe the Fedora openssh package was built differently.

[Bana]

This kinda smells like a bug, try submitting a bug report here http://bugzilla.redhat.com/bugzilla/index.cgi after you have thoroughly scoured the internet (the mailing list archives would be a good place to look) HTH

[Szpak]

Originally posted by Bana

This kinda smells like a bug, try submitting a bug report here http://bugzilla.redhat.com/bugzilla/index.cgi after you have thoroughly scoured the internet (the mailing list archives would be a good place to look) HTH

This is good idea. I've looked through mailing lists, newsgroups and forums before post here, but without any results.
For interested: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=118855

Szpak

[Bana]

Good for you, it is an excellent direction to take to give back to the fedora community in this way (posting bugs), it is somewhat intimidating as well. And don't be discouraged if your bug is labeled NOTABUG as the omnipotent bug taker-carers label it, I know I have had my last few labeled that. hangs head in shame:p

[ghenry]

Hi,

I am running Test1 and uncommenting that line works for me. openssh-server:

openssh-server-3.6.1p2-27

HTH.

[Szpak]

Unfortunately I couldn't check if it (3.6.1p2-34) works for me, because of fact that:

[szpak@szpak cos]$ ssh szpak
szpak@szpak's password:
Connection to szpak closed by remote host.
Connection to szpak closed.

In bugzilla I got answer:
<QUOTA>
Additional Comment #1 From Bart Martens on 2004-03-22 01:17 -------

openssh-server-3.6.1p2-19

Bug known upstream, see:
http://bugzilla.mindrot.org/show_bug.cgi?id=463

Workaround: chmod a+r /var/log/lastlog

The bug exists also on Debian sarge with ssh 3.6.1p2-12, but there the
lastlog file is already world readable, so the problem doesn't occur.
</QUOTA>

So, would You (ghenry) check what rights do You have on /var/log/lastlog ?

Szpak

[ghenry]

Hi, a ls -l /var/log/lastlog

shows:

-rw-r--r-- 1 root root 147752 Mar 24 15:36 /var/log/lastlog

I HTH.

[Szpak]

Thanks for listing. This works for me too.
But what impack to security does it take? (I'm not a security expert).

Szpak

[ghenry]

Well, if someone has physical access to your machine, then if they:cat /var/log/lastlog they would only see the last IP address of who last logged in. If they opened the file up with say, nano, then it wouldn't read anything. Try it.

But they would need physical access anyway, and be able to log in. So, IMHO no impact really.

[Szpak]

I've got needed answers. Thanks everyone for help.

Best regards
Szpak