I have an ES40, that for some reason, is not forwarding any authentication events to syslog. I've ran the following tests:
1) Verified that there were NO user auth. messages in the /var/adm/messages file.
2) Tried the command: #logger -p user.debug "testing...", and found that this sends the message "tacrib1 root: testing...", both to CW and also to the /var/adm/message file. This shows that the connections are there from logger to user.debug through the serial console and also to the messages file.
3) Added auth.debug /dev/console to syslog.conf, but still not working (even after killing syslogd and restarting it using /sbin/rc3.d/S09syslog start, then verified syslog process restarted). However, auth.log and user.log get written to correctly, by using the 'logger -p ' test above.
4) Verified that the lpr.info writes to syslog lpr.log correctly by generating a print job to taclsr that failed.
"more /etc/syslog.conf | lpr -P taclsr3"
----------------------------------------------------------------------------
Thank you, and please feel free to contact me by phone or email.
James Halte
Tacoma Power - T&D EMS Engineer
Office: (253) 502-8094
Cell: (253) 381-4088
Received on Mon Jan 07 2008 - 19:14:38 NZDT