Re: OpenSSH logging and MaxAuthTries

2017-03-19 Thread Lars Noodén
On 3/20/17, Darren Tucker : > On Sun, Mar 19, 2017 at 11:47 PM, Lars Noodén wrote: >> Looking at a recent snapshot, see dmesg at the bottom, I have two >> questions about OpenSSH logging. >> >> 1) The entry in sshd_config(5) for MaxAuthTries states the following >> about log entries: >> >>

Re: OpenSSH logging and MaxAuthTries

2017-03-19 Thread Lars Noodén
Sorry. That previous message got mangled. > $ ssh-add -l > The agent has no identities. On the server it looks like it says the client is asking for 'keyboard-interactive' first of all things: > debug1: userauth-request for user fred service ssh-connection method > none [preauth] > debug1: atte

Re: OpenSSH logging and MaxAuthTries

2017-03-19 Thread Lars Noodén
>> 2) The client gets disconnected before MaxAuthTries is reached. If I >> have it set to 6, I get 5 only tries: > > Your log level isn't high enough to see it, but I suspect you have a > failed pubkey attempt before the password attempts. You should be > able to see it if you add "-vvv" to the c

Re: OpenSSH logging and MaxAuthTries

2017-03-19 Thread Darren Tucker
On Sun, Mar 19, 2017 at 11:47 PM, Lars Noodén wrote: > Looking at a recent snapshot, see dmesg at the bottom, I have two > questions about OpenSSH logging. > > 1) The entry in sshd_config(5) for MaxAuthTries states the following > about log entries: > > ... Once the number of failure

OpenSSH logging and MaxAuthTries

2017-03-19 Thread Lars Noodén
Looking at a recent snapshot, see dmesg at the bottom, I have two questions about OpenSSH logging. 1) The entry in sshd_config(5) for MaxAuthTries states the following about log entries: ... Once the number of failures reaches half this value, additional failures are lo