1844843 Members
2536 Online
110233 Solutions
New Discussion

entries in syslog.log

 
SOLVED
Go to solution
prash_1
Frequent Advisor

entries in syslog.log

dear friends,
In my rp-3410 server with HP-UX11.11 syslog entry
1) Nov 16 sshd[5715]: channel 2: open failed: administratively prohibited:
Nov 16 sshd[5715]: channel 3: open failed: administratively prohibited:
what is this entry ?


2)Nov 15 rlogind[13579]: Login failure (exit(130) from login(1))
Nov 15 rlogind[28518]: Login failure (exit(130) from login(1))

In above entry it show login failure but when I checked by #lastb command there is no bad login on date Nov 15

I warried about any one hacking my server?
Plz give me any idea about above entries


thanks in advance.

3 REPLIES 3
rariasn
Honored Contributor
Solution

Re: entries in syslog.log

Hi prash,


$ man sshd
...
sshd (SSH Daemon) is the daemon program for ssh(1). Together these programs replace rlogin and rsh, and provide secure encrypted
communications between two untrusted hosts over an insecure network.
The programs are intended to be as easy to install and use as possible.

$ man sshd_config
sshd reads configuration data from /opt/ssh/etc/sshd_config (or the file specified with -f on the command line). The file contains keyword-argument pairs, one per line. Lines starting with `#' and empty lines are interpreted as comments.



rgs.
Coolmar
Esteemed Contributor

Re: entries in syslog.log

Hi Prash,

Edit your sshd_config file and make sure the following line is as follows:

AllowTcpForwarding yes

HTH,
prash_1
Frequent Advisor

Re: entries in syslog.log

Thanks for your quick response