HPE Community read-only access December 15, 2018
This is a maintenance upgrade. You will be able to read articles and posts, but not post or reply.
Hours:
Dec 15, 4:00 am to 10:00 am UTC
Dec 14, 10:00 pm CST to Dec 15, 4:00 am CST
Dec 14, 8:00 pm PST to Dec 15, 2:00 am PST
System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

ssh works but get failed login in btmp

 
SOLVED
Go to solution
dictum9
Super Advisor

ssh works but get failed login in btmp


I get a zillion of these messages, while ssh works just fine, this error registers in btmp.
Both systems are 11.23.


Why is this happening?



OpC Message received at 10:31:49 02/24/2010 :
Source node: 'saptst01'
Severity 'warning'
Text: 'FAILED root ssh:notty 02/24/10 10:31:44 condition_name=Failed ssh root login [OSSPI-HPUX-BadLogs.1]'
Instruction: ''
Supp Dup Msgs: '0'
6 REPLIES
James R. Ferguson
Acclaimed Contributor
Solution

Re: ssh works but get failed login in btmp

Hi:

What version of SecureShell are your running and is it from HP?

# swlist | grep -i secure

I don't have this problem on an 11.23 server running Secure Shell (T1471AA) A.05.10.007.

For that matter, if you don't want to log bad logins, simply remove '/var/adm/btmps'. This disables the logging.

Regards!

...JRF...


dictum9
Super Advisor

Re: ssh works but get failed login in btmp

I think I need the logging.

#: swlist | grep -i secure
OpenSSL A.00.09.07i.005 Secure Network Communications Protocol
T1471AA A.03.91.009 HP-UX Secure Shell
ixGnuPG A.07.00-1.4.2.2.001 Tool for secure communication and data storage
dictum9
Super Advisor

Re: ssh works but get failed login in btmp

Any ideas?
Steven Schweda
Honored Contributor

Re: ssh works but get failed login in btmp

> Any ideas?

You mean other than upgrading SSH to
something less obsolete?

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

That's where I'd start.
Patrick Wallek
Honored Contributor

Re: ssh works but get failed login in btmp

I am running SSH A.5.10.007 on a 11.23 server, and I don't have the problem either.

I would advise you to upgrade the version of SSH you are running on that server.

Steven E. Protter
Exalted Contributor

Re: ssh works but get failed login in btmp

Shalom etc,

Good system administrators are proactive about keeping up with secure shell releases. This is simply something you need to make time for.

>>
For that matter, if you don't want to log bad logins, simply remove '/var/adm/btmps'. This disables the logging.
<<

Taking the above step will mostly cause you to fail a security audit. It is important to keep track of bad login attempts and can depending on your companies interpretation of the law, cause you SOX problems.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com