Tomáš Tomčák tomastomcak at
Thu May 13 10:07:39 CEST 2021


I would like to ask you if you were facing issue with plugin check_ssh as I
do .

The problem is that even the check is green and output is displayed
correctly I am getting error messages in /var/log/audit on targets which
are caused by  check_ssh.

type=USER_LOGIN msg=audit(05/13/2021 09:28:05.018:4011474) : pid=1147767
uid=root auid=unset ses=unset subj=system_u:system_r:sshd_t:s0-s0:c0.c1023
msg='op=login acct=(unknown) exe=/usr/sbin/sshd hostname=?
addr=XXXX.XXXX.XXXX.XXXX  terminal=ssh res=failed'

Do you know please how to prevent or get rid of this behaviour ? Looks like
plugin can not authenticate maybe with some authentication method and
eventually it success but will cause these failed login messages on targets.

Thank you a lot in advance
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the Devel mailing list