Filed with Developers sftp logging without jailshell [Case 56638]

[sirdopes]

I tried enabling sftp logging by adding the following to the sshd_config. This works if jail shell is enabled but not if the shell is set to /usr/local/cpanel/bin/noshell.

Subsystem sftp /usr/libexec/openssh/sftp-server -l INFO

From what I can tell, this is because /usr/libexec/openssh/sftp-server is hardcoded and the -l INFO is causing it not to match and return "Shell access is not enabled on your account!".

This generates the following error message 'Received message too long 1399350636'.

The decimal 1399350636 is "Shel" when converted to ascii.

I would like to be able to add sftp logging that is similar to the ftp logs.

[txspaderz]

Super awesome idea! Seconded

[santrix]

Thirded!!! A quickly increasing number of users use SFTP, and tracking problems is a nightmare!

[Tech]

+1 for this, perhaps enabled by default so that the logging for SFTP matches that available with standard FTP in messages?

[monarobase]

+1 This is indeed necessary, this is even urgent for companies that legaly have to keep all logs for a certain period of time !