X-Recipient: archive-cygwin AT delorie DOT com X-SWARE-Spam-Status: No, hits=-0.7 required=5.0 tests=AWL,BAYES_40,SPF_HELO_PASS,TW_XT,T_RP_MATCHES_RCVD X-Spam-Check-By: sourceware.org To: cygwin AT cygwin DOT com From: =?UTF-8?B?UmVuw6kgQmVyYmVy?= Subject: Re: Enable logging remote ssh contacts Date: Wed, 27 Apr 2011 15:38:09 -0500 Lines: 41 Message-ID: References: <31478200 DOT post AT talk DOT nabble DOT com> <20110426132128 DOT GA6293 AT jethro DOT local DOT lan> <31478748 DOT post AT talk DOT nabble DOT com> <4DB6E0EA DOT 8070901 AT cygwin DOT com> <31481290 DOT post AT talk DOT nabble DOT com> <31484865 DOT post AT talk DOT nabble DOT com> <31485107 DOT post AT talk DOT nabble DOT com> <31490012 DOT post AT talk DOT nabble DOT com> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.19) Gecko/20081209 Lightning/0.9 Thunderbird/2.0.0.19 Mnenhy/0.7.6.0 In-Reply-To: <31490012.post@talk.nabble.com> X-IsSubscribed: yes Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm Precedence: bulk List-Id: List-Unsubscribe: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com On 4/27/2011 1:49 PM, Fokke Nauta wrote: > I don't have any ll in the shell. Not recognized. Oops! My mistake, ll is an bash alias I defined, its just "ls -alhF --color=3Dtty" (actually is an alias that uses the alias ls is defined to, but I included what both aliases do for simplicity). > So I can't see the=20 > I have syslog-ng running. Should I replace that by autossh? No, autossh is something else, I just kept it to show you how a Windows service looks, like the sshd.log you have. > Strange enough the file /var/log/messages could not be opened by Windows. > Tried with Textpad and Notepad. In both occasions it said: "access denied= ". > So I installed cron and now copy /var/log/messages to a different location > every 10 minutes. I can now read that file from Windows. However, copying > that file creates an entry in the /var/log/messages file. > So better quit syslog-ng and cron and use autossh instead? No, just run the following to see if everything is running as expected: cygrunsrv -LV Note the "Account" for both sshd and syslog-ng. That usually is what gives problems. If both where installed using the Cygwin provided scripts, perhaps with some help as provided in /usr/share/doc/Cygwin/.README, then everything would work fine. My guess is that there is a difference, which creates the problem, and it will show in the output of cygrunsrv. If you send it to the list, we probably can spot the problem. --=20 Ren=C3=A9 Berber -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple