Difference between revisions of "Secure file transfer program (sftp)"

From wikieduonline
Jump to navigation Jump to search
Tags: Mobile web edit, Mobile edit
Tags: Mobile web edit, Mobile edit
Line 13: Line 13:
  
  
If public-key authentication fails it will be the only mesage logged.
+
Example of failed login:
 
  May 07 15:28:06 SERVER sshd[1869802]: Connection closed by authenticating user USERNAME 23.33.xx.xx port 12547 [preauth]
 
  May 07 15:28:06 SERVER sshd[1869802]: Connection closed by authenticating user USERNAME 23.33.xx.xx port 12547 [preauth]
 +
 +
Example of failed login with [[verbose]] mode:
 +
May 07 15:55:01 SERVER sshd[1870524]: Failed none for  USERNAME  from 23.33.xx.xx port 12616 ssh2
 +
May 07 15:55:01 SERVER sshd[1870524]: Failed [[publickey]] for  USERNAME  from 23.33.xx.xx port 12616 ssh2: [[RSA]] [[SHA256]]:tAkCKfvCmOTpVeceSyAOy9Sjyp213hQ7RLTyKUaNw12
 +
May 07 15:55:00 SERVER sshd[1870524]: Connection from 23.33.xx.xx port 12616 on 10.10.10.xx port 22 [[rdomain]] ""
 +
 +
  
  

Revision as of 12:40, 7 May 2020

wikipedia:Secure file transfer program


 This service allows sftp connections only.


Activities

Logs

Example of failed login:

May 07 15:28:06 SERVER sshd[1869802]: Connection closed by authenticating user USERNAME 23.33.xx.xx port 12547 [preauth]

Example of failed login with verbose mode:

May 07 15:55:01 SERVER sshd[1870524]: Failed none for  USERNAME  from 23.33.xx.xx port 12616 ssh2
May 07 15:55:01 SERVER sshd[1870524]: Failed publickey for  USERNAME  from 23.33.xx.xx port 12616 ssh2: RSA SHA256:tAkCKfvCmOTpVeceSyAOy9Sjyp213hQ7RLTyKUaNw12
May 07 15:55:00 SERVER sshd[1870524]: Connection from 23.33.xx.xx port 12616 on 10.10.10.xx port 22 rdomain ""



Example of successfully session:

May 07 15:35:07 SERVER sshd[1870236]: Accepted publickey for USER from xx.xx.xx.xx port 60249 ssh2: ED25519 SHA256:EPEztZnnCh/fPqJ5wlgXUYMMx+LOOIegGdF76galaXw
May 07 15:35:07 SERVER sshd[1870236]: pam_unix(sshd:session): session opened for user USER by (uid=0)
May 07 15:35:07 SERVER systemd-logind[2350]: New session 2668 of user USER.
May 07 15:35:07 SERVER systemd[1]: Started Session 2668 of user USER.

Related terms

See also

Advertising: