Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-50838

when authentication failed audit USER_LOGIN is not printed

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Cannot Reproduce
    • Icon: Normal Normal
    • None
    • rhel-10.0.beta
    • openssh
    • No
    • Low
    • rhel-security-crypto
    • ssg_security
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • All
    • None

      What were you trying to do that didn't work?

      run TC /CoreOS/openssh/Regression/bz1488083-segfaults-when-cleaning-up-session-due-to-some

      Please provide the package NVR for which bug is seen:

      openssh-9.8p1-2.el10.0.x86_64

      How reproducible:

      always

      Steps to reproduce

      1. start the server with uncon system_u:system_r:initrc_t:s0 bash -c "(/usr/sbin/sshd -D -ddd -p 2222 -o 'MaxAuthTries=2' -o 'UsePrivilegeSeparation=No' &> ssh.log) &"
      2. login with the user ssh -vvv bob@localhost -p 2222 with wrong password
      3. check audit.log

      Expected results

      audit.log should contain msg "type=USER_LOGIN*sshd.*failed"

      Actual results

      No USER_LOGIN message in audit.log

              dbelyavs@redhat.com Dmitry Belyavskiy
              rh-ee-mbezokon Miluse Bezo Konecna
              Dmitry Belyavskiy Dmitry Belyavskiy
              Miluse Bezo Konecna Miluse Bezo Konecna
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: