Centos has logs with two “hours”, UTC and GMT, why?

Question

my logs contain currently two timezones, do you have an idea from where it comes and how to fix this? It's the first time I see this on a system.

The system is running inside a Virtuozzo container with CentOS 5.

Here is a small snippet:

May 11 13:51:37 dido sshd[13443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=XXXXXXXXXXX  user=root
May 11 13:51:39 dido sshd[13443]: Failed password for root from XXXXXXXXXXX port 46038 ssh2
May 11 **11:51:39** dido sshd[13447]: Received disconnect from XXXXXXXXXXX: 11: Bye Bye
May 11 13:51:40 dido sshd[13467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=XXXXXXXXXXX  user=root
May 11 13:51:42 dido sshd[13467]: Failed password for root from XXXXXXXXXXX port 46312 ssh2
May 11 **11:51:42** dido sshd[13473]: Received disconnect from XXXXXXXXXXX: 11: Bye Bye

As you can see, for the message "Bye Bye" it logged it with the UTC timezone instead of the GMT.

Thank you, Mike

Answer 1

The Process-IDs don't match, so it looks like there are separate sshd processes each picking up different timezone settings.

For example: do you have one sshd started from /etc/rc, inetd or xinetd and another started manually on a different port, started from an interactive session (with a local TZ setting)?