any way to track commands of a user logged in through ssh

Hi,
Is there a way to track down the command history of a user logged in
through ssh ?
I'll explain it with an example, I hope it helps..This had recently
happened.
We monitor a server, which is phyzically around 2000 miles from my
present location, through ssh. A couple of days back, a new guy in the
office, also a sys admin, had loggen in to this server (RHEL4) and by
mistake or something else ( he was denying the fact that he did it )
had issued the command
#service sshd stop
So, we were not able to log into the server remotely. As a result, some
one had to phyzically do:
#service sshd start
I wanted to know is there some way that I can track down the commands
that a particular user has issued, so that I can catch the person if
something goes wrong..

Also I would like to tell you that this new guy had the root's
password..

Thanks
Danish

.

Relevant Pages

  • How can I restrict incoming root rsync over ssh to specified command?
    ... will use rsync over ssh to pull certain directories from the ssh ... Here's an example of the command, ... Even with the server locked up in a room with no user ...
    (comp.os.linux.security)
  • Re: rsync and ssh simple question
    ... possible to tie an SSH key to a specific command on a remote server, ... For instance, when you run rsync over ssh, the local rsync command ...
    (RedHat)
  • Re: [Info-ingres] problems with ssh
    ... Check the SSHD log on the server for errors. ... ancient version of SSH, unfortunately. ... the command seems to have functioned - but just wont terminate and leaves a process hanging around. ... Duckman: You got anymore of those glues? ...
    (comp.databases.ingres)
  • Re: ssh: start vnc server remotely
    ... > I have x11vnc on my computer and I want to start the server using ssh ... > command in ssh and that command just runs on the computer I'm connected ... The only people for me are the mad ones -- the ones who are mad to live, mad to talk, mad to be saved, desirous of everything at the same time, the ones who never yawn or say a commonplace thing, but burn, burn, burn like fabulous yellow Roman candles. ...
    (comp.os.linux.misc)
  • RE: Writing output of a Shell command directly to a file
    ... > activity on the host box during a full backup. ... > backup server it's self (since the backup server may actually ... I can do this on the command line with a ... If you look in the SSH module at the sshroutine, ...
    (perl.beginners)