Successful SSH login attempts are not logged in /var/log/messages in Authentication Manager prior to 8.4
Originally Published: 2019-11-27
Article Number
Applies To
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.1.x, 8.2.x, 8.3.x
Issue
Cause
Resolution
- SSH into Authentication Manager.
- Change to root using the following command:
sudo su -
- Edit the file /etc/pam.d/common-session using the following command:
vim /etc/pam.d/common-session
- Press i to enter Insert mode.
- Add the following line to the end of the file:
session required pam_warn.so
- Press ESC to exit Insert mode.
- Save and exit by typing :wq!
- Repeat steps 1 - 7 on each RSA Authentication Manager instance, whether it is a primary or a replica, to log successful SSH authentication attempts for the instance.
Related Articles
Unable to start RSA ACE/Server services after stopping them when Quick Admin was used prior to stop 22Number of Views Previewing Role changes prior to Applying those changes shows other incorrect/unrelated changes to the Role in RSA Identit… 29Number of Views SecurID Access: Repeated LDAP Bind Errors logged 120Number of Views RSA SecurID end users setting their own PIN or next tokencode on a VPN connection 70Number of Views How to purge table data prior to version 7.0.1 in RSA Identity Governance & Lifecycle 1.14KNumber of Views
Trending Articles
Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory RSA Authentication Manager 8.9 Release Notes (January 2026) Artifacts to gather in RSA Identity Governance & Lifecycle RSA Governance & Lifecycle 8.0.0 Administrators Guide RSA Governance & Lifecycle 8.0.0 Installation Guide
Don't see what you're looking for?