topic Re: sftp logging in Operating System - HP-UX

sftp logging

Elena Leontieva — Fri, 07 Sep 2007 09:58:06 GMT

Hi,

How to configure sftp to log all files recieved/transmitted by sftp-server (similar to ftpd -o -i options)?

HP-UX 11.23, A.04.30.007 HP-UX Secure Shell

Thank you,
Elena.

Re: sftp logging

Glenn S. Davidson — Fri, 07 Sep 2007 11:09:45 GMT

sftp gets it's configuration from ssh_config but you can specify the options on the sftp command line by using -o.

sftp -oLogLevel=VERBOSE

I didn't look up VERBOSE to see if that will provide what you are looking for but if you check the man pages on sftp and ssh_config you can probably find what you are looking for.

Re: sftp logging

rariasn — Mon, 10 Sep 2007 06:00:07 GMT

Hi elena:

#ssh -V
OpenSSH_4.4p1-hpn12v11, OpenSSL 0.9.7l 28 Sep 2006
HP-UX Secure Shell-A.04.40.006, HP-UX Secure Shell version

In "sshd_config" set this option:

Subsystem sftp /opt/ssh/libexec/sftp-server -f LOCAL1 -l INFO

Restart "sshd" daemon.

rgs.

Re: sftp logging

Ivan Krastev — Mon, 10 Sep 2007 06:17:48 GMT

Just use new sftp logging features, introduced in version 3.9 - http://docs.hp.com/en/T1471-90014/ch01s02.html#babhjeeh

regards,
ivan

Re: sftp logging

Elena Leontieva — Mon, 10 Sep 2007 12:30:46 GMT

Hello,

In ssshd_config I specified:

LogSftp yes
#SftpLogFacility AUTH
#SftpLogLevel INFO

But all I see in syslog.log is "Subsystem request for sftp".

Apparently the "-f" option does not work with the configuration file that I have.

Thanks,
Elena.

Re: sftp logging

Ivan Krastev — Mon, 10 Sep 2007 14:16:16 GMT

Use:

SftpLogLevel VERBOSE

regards,
ivan

Re: sftp logging

Elena Leontieva — Mon, 10 Sep 2007 14:37:01 GMT

Hi,

The same thing, no info about the file.

The bigger question is why I can not use the -f option.

I should use the -f option with my version of ssh:

coci160(root):/opt/ssh/etc > ssh -V
OpenSSH_4.5p1+sftpfilecontrol-v1.1-hpn12v14, OpenSSL 0.9.7l 28 Sep 2006
HP-UX Secure Shell-A.04.50.004, HP-UX Secure Shell version
coci160(root):/opt/ssh/etc >

But if I copy the default file /opt/ssh/newconfig/opt/ssh/etc/sshd_config and add "-f" the ssh would not start at all.

I upgraded to this version by installing it on top of the older version of ssh as recommended in the installation instructions.

Thanks,
Elena.

Re: sftp logging

rariasn — Tue, 11 Sep 2007 06:02:09 GMT

Hi Elena,

# man 8 sftp-server

and verify sftplogin options

http://sftplogging.sourceforge.net/docs/installation.html

rgs,