X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=-1.5 required=5.0	tests=AWL,BAYES_00,FREEMAIL_FROM,TW_XT,T_FILL_THIS_FORM_SHORT,T_RP_MATCHES_RCVD,T_TO_NO_BRKTS_FREEMAIL
X-Spam-Check-By: sourceware.org
Message-ID: <31496002.post@talk.nabble.com>
Date: Thu, 28 Apr 2011 05:36:04 -0700 (PDT)
From: Fokke Nauta <fnauta AT solfon DOT nl>
To: cygwin AT cygwin DOT com
Subject: Re: Enable logging remote ssh contacts
In-Reply-To: <ip9uri$q03$1@dough.gmane.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
References: <31478200 DOT post AT talk DOT nabble DOT com> <20110426132128 DOT GA6293 AT jethro DOT local DOT lan> <31478748 DOT post AT talk DOT nabble DOT com> <4DB6E0EA DOT 8070901 AT cygwin DOT com> <31481290 DOT post AT talk DOT nabble DOT com> <ip7d1h$tt4$1 AT dough DOT gmane DOT org> <31484865 DOT post AT talk DOT nabble DOT com> <31485107 DOT post AT talk DOT nabble DOT com> <ip9h0a$39g$1 AT dough DOT gmane DOT org> <31490012 DOT post AT talk DOT nabble DOT com> <ip9uri$q03$1 AT dough DOT gmane DOT org>
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com



Ren=C3=A9 Berber-2 wrote:
>=20
> On 4/27/2011 1:49 PM, Fokke Nauta wrote:
>=20
>> I don't have any ll in the shell. Not recognized.
>=20
> Oops!  My mistake, ll is an bash alias I defined, its just "ls -alhF
> --color=3Dtty" (actually is an alias that uses the alias ls is defined to,
> but I included what both aliases do for simplicity).
>=20
>> So I can't see the=20
>> I have syslog-ng running. Should I replace that by autossh?
>=20
> No, autossh is something else, I just kept it to show you how a Windows
> service looks, like the sshd.log you have.
>=20
>> Strange enough the file /var/log/messages could not be opened by Windows.
>> Tried with Textpad and Notepad. In both occasions it said: "access
>> denied".
>> So I installed cron and now copy /var/log/messages to a different
>> location
>> every 10 minutes. I can now read that file from Windows. However, copying
>> that file creates an entry in the /var/log/messages file.
>> So better quit syslog-ng and cron and use autossh instead?
>=20
> No, just run the following to see if everything is running as expected:
>=20
> cygrunsrv -LV
>=20
> Note the "Account" for both sshd and syslog-ng.  That usually is what
> gives problems.
>=20
> If both where installed using the Cygwin provided scripts, perhaps with
> some help as provided in /usr/share/doc/Cygwin/<package>.README, then
> everything would work fine.  My guess is that there is a difference,
> which creates the problem, and it will show in the output of cygrunsrv.
>  If you send it to the list, we probably can spot the problem.
> --=20
> Ren=C3=A9 Berber
>=20

Hi Ren=C3=A9,

Thanks.=20
Basically, everything works fine except that it is impossible to open
/var/log/messages in Windows. But, as I already answerd to Cyrille, that is
perhaps a matter if using chmod to that file?

Running cygrunsrv -LV generates:

Service             : cron
Display name        : Cron daemon
Current State       : Running
Controls Accepted   : Stop
Command             : /usr/sbin/cron -n
stdin path          : /dev/null
stdout path         : /var/log/cron.log
stderr path         : /var/log/cron.log
Environment         : CYGWIN=3D"ntsec"=20
Process Type        : Own Process
Startup             : Automatic
Account             : .\Fokke Nauta

Service             : sshd
Display name        : CYGWIN sshd
Current State       : Running
Controls Accepted   : Stop
Command             : /usr/sbin/sshd -D
stdin path          : /dev/null
stdout path         : /var/log/sshd.log
stderr path         : /var/log/sshd.log
Environment         : CYGWIN=3D"ntsec tty"=20
Process Type        : Own Process
Startup             : Automatic
Dependencies        : tcpip
Account             : LocalSystem

Service             : syslog-ng
Display name        : CYGWIN syslog-ng
Current State       : Running
Controls Accepted   : Stop
Command             : /usr/sbin/syslog-ng -F
stdin path          : /dev/null
stdout path         : /var/log/syslog-ng.log
stderr path         : /var/log/syslog-ng.log
Process Type        : Own Process
Startup             : Automatic
Account             : LocalSystem

With regards,
Fokke


--=20
View this message in context: http://old.nabble.com/Enable-logging-remote-s=
sh-contacts-tp31478200p31496002.html
Sent from the Cygwin list mailing list archive at Nabble.com.


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple