Create a report of Users SSHing to other servers

[kozlow]

Does anyone have a script that will report Users SSHing to other servers?

I am trying to find out if wtmp/btmp keeps track of users signing on to other servers...

We are creating a Centrilized Management Server and looking for a way to keep track of use.

This seems pretty straight forward... Thanks in advance.

 

[Annihilannic]

wtmp/btmp only tracks stuff happening on the local server.

I would create a wrapper for the ssh binary to do something like this, e.g.

#!/usr/bin/ksh

echo "$(date): user $LOGNAME executed: $@" >> /var/log/ssh.log

exec /usr/bin/ssh.orig "$@"

Annihilannic.