# /etc/pam.d/sshd
session required pam_tlog.so