[OmniOS-discuss] A small gotcha with switching the ssh & openssh packages in OmniOS

Bob Friesenhahn bfriesen at simple.dallas.tx.us
Sat Nov 21 15:54:26 UTC 2015


A change I am seeing here (not related to GSSAPI/Kerberos) is that 
with OpenSSH, no user login accounting is performed for remotely 
executed commands (e.g. "ssh host ls /") so that remote command 
execution (vs shell login) not appear in 'last'.  This is true if 
UsePAM is 'yes' or 'no'.  While this lessens the amount of noise, it 
makes me feel uneasy since there is no record of who executed remote 
commands via ssh.

Shell logins do show in 'last'.

Bob
-- 
Bob Friesenhahn
bfriesen at simple.dallas.tx.us, http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/


More information about the OmniOS-discuss mailing list