MonitorWare Knowledge Base

I'm trying to log session open/close so that I could know when a user logs in / out.

In older redhat boxes, I get messages like this, when a user logs in,
'session opened for user root by (uid=0)' with syslog tag 'sshd(pam_unix)[3468]'
and when a user logs out I get 'session closed for user root' with syslog tag 'sshd(pam_unix)[3468]'

However, this doesnt happen at suse boxes.
since they have different pam modules, I think it has to do with PAM

Do u know if there's any way to activate session open/close logging at SuSe boxes?

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?