topic Re: HIDS tracking SSH failed logins in Operating System - HP-UX

HIDS tracking SSH failed logins

Doug Corey_1 — Wed, 04 May 2005 10:54:54 GMT

I have 11.11 with HIDS 3.0 and SSH 3.x

When I schedule HIDS to track Repeated failed logins it does not catch invalid SSH attempts.

It will catch a valid SSH login as well as a telnet failed login, but no SSH failed logins.

Any input?

Re: HIDS tracking SSH failed logins

Doug Corey_1 — Wed, 04 May 2005 11:06:23 GMT

Nevermind. Listed clearly in the 'Limitations' section!

http://docs.hp.com/en/5991-1162/apas14.html

Re: HIDS tracking SSH failed logins

Doug Corey_1 — Thu, 05 May 2005 11:42:34 GMT

The HIDS doc says to set "UsePAM" to "no". I use ssh.com and that setting is not there. Any ideas?