Repository navigation
sshlog doesn't work on Debian 13 (Trixie) #26
Description
- sshlogd v1.1.0 (same behaviour with 1.0.0)
- Debian 13 (Trixie), kernel 6.12.74+deb13+1-amd64
- OpenSSH 10.0p1-7+deb13u1: sshd-session child (/usr/lib/openssh/sshd-session)
- Symptom: the events are visible in --debug but username/tty_id always empty and user_id: -1, no action taken
- Possible cause: sshlogd does not resolve user/TTY correctly with new process model of OpenSSH 9.8+
Activity
sylvainfaivre commentedon Aug 5, 2026
I ran into the same issue, and wrote a PR (AI assisted) : #27
matthill commentedon Sep 13, 2026
I tested with a VM running
and openssh-server
And SSHLog seems to be working fine. Is there something else I need to do to reproduce?
sylvainfaivre commentedon Oct 6, 2026
@matthill did you look at the comments in my PR ? The process hierarchy changed with OpenSSH 9.8. What do the processes look like on your vm ?
matthill commentedon Oct 6, 2026
Yes, on my VM the process hierarchy did not change, so the existing code worked. I need to verify the problem first. I'm not sure what else would be different.
Are you using standard configuration or there's something unique/custom about your install? You're running x86?