From mboxrd@z Thu Jan  1 00:00:00 1970
From: List Quest <listquest@gmail.com>
Subject: USER_LOGIN
Date: Mon, 19 Jul 2010 16:33:11 +0300
Message-ID: <AANLkTimketCyWMyDsJdYFuCTBp_8F3Z4hNzbfn7vCoki@mail.gmail.com>
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="===============5819663261981446048=="
Return-path: <linux-audit-bounces@redhat.com>
Received: from mx1.redhat.com (ext-mx05.extmail.prod.ext.phx2.redhat.com
	[10.5.110.9])
	by int-mx04.intmail.prod.int.phx2.redhat.com (8.13.8/8.13.8) with ESMTP
	id o6JDXO42006349
	for <linux-audit@redhat.com>; Mon, 19 Jul 2010 09:33:24 -0400
Received: from mail-ww0-f46.google.com (mail-ww0-f46.google.com [74.125.82.46])
	by mx1.redhat.com (8.13.8/8.13.8) with ESMTP id o6JDXBRA012832
	for <linux-audit@redhat.com>; Mon, 19 Jul 2010 09:33:12 -0400
Received: by wwi17 with SMTP id 17so63488wwi.27
	for <linux-audit@redhat.com>; Mon, 19 Jul 2010 06:33:11 -0700 (PDT)
List-Unsubscribe: <https://www.redhat.com/mailman/options/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: linux-audit@redhat.com
List-Id: linux-audit@redhat.com

--===============5819663261981446048==
Content-Type: multipart/alternative; boundary=001636831d48214f1b048bbd9c9c

--001636831d48214f1b048bbd9c9c
Content-Type: text/plain; charset=ISO-8859-1

Hi;

I reading USER_LOGIN logs fom audit.log.
SSHD login trys loging USER_LOGIN line; but FTP logins no write USER_LOGIN
line?

Example:

- Trying SSH Connect:

Following lines writing to audit.log
type=USER_AUTH ...
type=USER_ACCT ...
type=USER_START...
type=USER_LOGIN...

- Trying FTP Connect:

Following lines writing to audit.log
type=USER_AUTH ...
type=USER_ACCT ...
(NO USER_LOGIN LINE?)

Wyh this?

Thanks
Best Regards

--001636831d48214f1b048bbd9c9c
Content-Type: text/html; charset=ISO-8859-1

Hi;<br><br>I reading USER_LOGIN logs fom audit.log. <br>SSHD login trys loging USER_LOGIN line; but FTP logins no write USER_LOGIN line?<br><br>Example:<br><br>- Trying SSH Connect:<br><br>Following lines writing to audit.log<br>
type=USER_AUTH ...<br>type=USER_ACCT ...<br>type=USER_START... <br>type=USER_LOGIN...<br><br>- Trying FTP Connect:<br><br>Following lines writing to audit.log<br>type=USER_AUTH ...<br>type=USER_ACCT ...<br>(NO USER_LOGIN LINE?)<br>
<br>Wyh this?<br><br>Thanks<br>Best Regards

--001636831d48214f1b048bbd9c9c--


--===============5819663261981446048==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============5819663261981446048==--