HPE Community
Operating System - HP-UX
1834486 Members
3702 Online
110067 Solutions
New Discussion

Re: HIDS tracking SSH failed logins

 
Doug Corey_1
Occasional Advisor

‎05-04-2005 03:54 AM

‎05-04-2005 03:54 AM

HIDS tracking SSH failed logins

I have 11.11 with HIDS 3.0 and SSH 3.x

When I schedule HIDS to track Repeated failed logins it does not catch invalid SSH attempts.

It will catch a valid SSH login as well as a telnet failed login, but no SSH failed logins.

Any input?
0 Kudos
Reply
2 REPLIES 2
Doug Corey_1
Occasional Advisor

‎05-04-2005 04:06 AM

‎05-04-2005 04:06 AM

Re: HIDS tracking SSH failed logins

Nevermind. Listed clearly in the 'Limitations' section!

http://docs.hp.com/en/5991-1162/apas14.html
0 Kudos
Reply
Doug Corey_1
Occasional Advisor

‎05-05-2005 04:42 AM

‎05-05-2005 04:42 AM

Re: HIDS tracking SSH failed logins

The HIDS doc says to set "UsePAM" to "no". I use ssh.com and that setting is not there. Any ideas?
0 Kudos
Reply
The opinions expressed above are the personal opinions of the authors, not of Hewlett Packard Enterprise. By using this site, you accept the Terms of Use and Rules of Participation.