In /etc/ssh/sshd_config, uncomment the logging lines, and turn logging to debug. That will give you a lot more info. You'll want to turn it off after, as according to the sshd_config man page "Debug violates user's privacy". One thing that just happened to me as I'm typing this: ssh would prompt me for a login, but wouldn't log me in. No log of the event, just dumped me out. I sent SIGHUP to it and everything is fine now. I'm sure you've tried restarting, but weird things happen. Also, make sure that: UsePAM=yes AllowRootLogin = Yes In you /etc/ssh/sshd_config -----Original Message----- From: Dick Goodman [mailto:wlug@goodman1.net] Sent: Tuesday, October 19, 2004 8:32 PM To: wlug@mail.wlug.org Subject: [Wlug] RH 7.3 ssh glitched after upgrade I have four RH 7.3 servers which had not been updated for a loooong time. I just found out about fedoralegacy.org, downloaded yum and did a "yum update" (excluding kernel) on all four systems. Everything seems fine, except.... when I log in between servers with ssh (any combination) I get two lines in the log similar to the following, whereas I used to only get the second one: Oct 19 18:10:08 archive3 sshd(pam_unix)[23780]: authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=h-68-167-xx-xxx.cmbrmaor.covad.net user=root Oct 19 18:10:11 archive3 sshd(pam_unix)[23780]: session opened for user root by (uid=0) I didn't make any config changes, in fact I've NEVER configured ssh, just using what was installed. I'm also getting a login delay following the first authentication failure. There is no failure message in the login panel, only in the log. I only log in once. /etc/ssh/ssh_known_hosts does not exist on any servers, and I didn't get the warning message I remember from first contact with a server (long ago, or after ISP changes). Any suggestions? Dick _______________________________________________ Wlug mailing list Wlug@mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug