unexpected ssh secure log entries

Mike Cohler mike.cohler at gmail.com
Mon May 15 07:31:03 UTC 2006


Has anyone else had entries in their /var/log/secure which appear when
a user on one fc5 machine connects to another fc5 machine using
password-less ssh like the following lines?

> May 14 20:27:59 home1 sshd[30846]: Postponed publickey for jim from
> 10.0.0.61 port 57618 ssh2
> May 14 21:27:59 home1 sshd[30845]: Accepted publickey for jim from
> 10.0.0.61 port 57618 ssh2
> May 14 20:27:59 home1 sshd[30846]: Accepted publickey for jim from
> 10.0.0.61 port 57618 ssh2
> May 14 21:27:59 home1 sshd[30847]: pam_unix(sshd:session): session opened
> for user jim by (uid=0)
> May 14 21:28:17 home1 sshd[30847]: pam_unix(sshd:session): session closed
> for user jim

The timestamp in the "Postponed" line as well as in the second
"Accepted" line is an hour early !  Yet the time on both machines is
correct if I look using "date" !

Is this anything which might indicate that I have a setting wrong in a
config file somewhere, or is this the way ssh is behaving in FC5 ? I
am puzzled!

Mike




More information about the users mailing list