topic su log file in Operating System - Linux

su log file

samson das s — Thu, 19 Oct 2006 02:19:25 GMT

dear all
iam new to linux
please tell me how to configure a sulog file for every su attempts

Re: su log file

Vitaly Karasik_1 — Thu, 19 Oct 2006 02:47:45 GMT

you already have "su" info in /var/log/messages

Re: su log file

Ivan Krastev — Thu, 19 Oct 2006 03:08:58 GMT

Another log file (in debian) is /var/adm/auth.log.

Oct 19 10:58:44 debian su[21110]: + pts/0 user1:root
Oct 19 10:58:44 debian su[21110]: (pam_unix) session opened for user root by user1 (uid=1000)

regards,
ivan

Re: su log file

Vitaly Karasik_1 — Thu, 19 Oct 2006 03:14:59 GMT

well, in fact it depends on /etc/syslog.conf that specific distro is using.

Re: su log file

monu_1 — Mon, 23 Oct 2006 05:43:47 GMT

Good day,

I want to clarify that SMTP log is same as maillog.

IF NOT WHERE I CAN SEE SMTP LOG FILE.

With Bregds,
Manoj

Re: su log file

Ivan Ferreira — Mon, 23 Oct 2006 08:38:11 GMT

By default, only correct "su" sessions are logged. If you want to log ALL su attemps, then you must configure pam's "pam_warn" module, like this:

/etc/pam.d/su

auth required pam_warn.so