Log IP addresses of hosts attempting to use blacklisted keys (closes:

#481721).

1 files changed, 6 insertions, 4 deletions

diff --git a/auth-rh-rsa.c b/auth-rh-rsa.c
index 77a043998..cd272e4ca 100644
--- a/auth-rh-rsa.c
+++ b/auth-rh-rsa.c
@@ -50,11 +50,13 @@ auth_rhosts_rsa_key_allowed(struct passwd *pw, char *cuser, char *chost,
         if (blacklisted_key(client_host_key) == 1) {
                 fp = key_fingerprint(client_host_key, SSH_FP_MD5, SSH_FP_HEX);
                 if (options.permit_blacklisted_keys)
-                        logit("Public key %s blacklisted (see "
-                            "ssh-vulnkey(1)); continuing anyway", fp);
+                        logit("Public key %s from %s blacklisted (see "
+                            "ssh-vulnkey(1)); continuing anyway",
+                            fp, get_remote_ipaddr());
                 else
-                        logit("Public key %s blacklisted (see "
-                            "ssh-vulnkey(1))", fp);
+                        logit("Public key %s from %s blacklisted (see "
+                            "ssh-vulnkey(1))",
+                            fp, get_remote_ipaddr());
                 xfree(fp);
                 if (!options.permit_blacklisted_keys)
                         return 0;