Re: [tlug] Under Solaris, are/can rsh access be logged?

[Romeo Theriault <romeo.theriault@example.com>]

On Wed, Aug 24, 2011 at 18:59, Jean-Christian Imbeault <jc.imbeault@example.com> wrote:

Under Solaris, where are rsh accesses logged? Under Linux I'd look at
/var/log/secure but under Solaris I can't find the equivalent file.

I've looked in /var/adm/messages and /var/log/auth but neither has any
entries for rsh access. I've read the syslog.conf docs but can't find
any specific mention of logging or how to log rsh.

I don't have an answer for you but it looks like rsh on solaris uses PAM for authentication. You probably want to look into making some changes to rsh's pam config to get it to log connection (attempts).

--

Romeo