In the last versions of PAMSC 14.1cp05 the behaviour of the ssh connection has changed, in previous version when login to a remote server via sftp we saw in seaudit this login SFTP, now all show as SSH
Detected in last versions of PAMSC 14.1 cp03,cp04,cp05
in PIM 12.8sp1 is ok.
After sftp connection, we look in seaudit and we see that connection is SSH
in trace log we see
The following configuration fixes the issue
stop seos agent
vi /etc/seos.ini
allow_exec_login = 1
and then start up the agent
#PAMSC>er loginappl SSH loginflags(execlogin)
Test the connections for sftp and ssh, now seaudit shows the difference connection type.