Bug 432

Summary: AIX does not log login attempts for unknown users
Product: Portable OpenSSH Reporter: Darren Tucker <dtucker>
Component: sshdAssignee: OpenSSH Bugzilla mailing list <openssh-bugs>
Status: CLOSED FIXED    
Severity: normal    
Priority: P2    
Version: -current   
Hardware: PPC   
OS: AIX   
Attachments:
Description Flags
Call loginfailed() on AIX for unknown usernames none

Description Darren Tucker 2002-11-08 11:48:46 AEDT 
A login attempt by an unknown user (eg via telnet) normally gets logged as:

syslog: pts/4: failed login attempt for UNKNOWN_USER from my.host.com

This is generated by a call to loginfailed(), which substitutes UNKNOWN_HOST for 
the username if it doesn't exist.

AIX never finds out about it because getpwnamallow returns as soon as it finds 
no passwd entry. Following patch calls loginfailed before returning. It 
generates:

syslog: ssh: failed login attempt for UNKNOWN_USER from my.host.com
Comment 1 Darren Tucker 2002-11-08 11:50:41 AEDT 
Created attachment 176 [details]
Call loginfailed() on AIX for unknown usernames
Comment 2 Ben Lindstrom 2002-11-10 03:12:13 AEDT 
Applied, Thanks to --current
Comment 3 Damien Miller 2004-04-14 12:24:18 AEST 
Mass change of RESOLVED bugs to CLOSED