tomastomcak at gmail.com
Thu May 13 10:07:39 CEST 2021
I would like to ask you if you were facing issue with plugin check_ssh as I
The problem is that even the check is green and output is displayed
correctly I am getting error messages in /var/log/audit on targets which
are caused by check_ssh.
type=USER_LOGIN msg=audit(05/13/2021 09:28:05.018:4011474) : pid=1147767
uid=root auid=unset ses=unset subj=system_u:system_r:sshd_t:s0-s0:c0.c1023
msg='op=login acct=(unknown) exe=/usr/sbin/sshd hostname=?
addr=XXXX.XXXX.XXXX.XXXX terminal=ssh res=failed'
Do you know please how to prevent or get rid of this behaviour ? Looks like
plugin can not authenticate maybe with some authentication method and
eventually it success but will cause these failed login messages on targets.
Thank you a lot in advance
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Help