Ssh – find the sshd log in Ubuntu 12.04

ssh

I have a fresh install of Ubuntu 12.04. I'm trying to setup ssh public key authentication. Unfortunately, it refuses to work. Running the ssh client in verbose mode I can see that the public keys are being refused.

~/.ssh/authorized_keys exists and seems to have the correct permissions etc.

What I would like to do is to read the sshd log to find out what it is complaining about. But I cannot find where the sshd logs to on Ubuntu 12.04. I've tried googling and checked /var/log/auth.log and /var/log/syslog and neither are showing sshd messages. Where can I find the daemon logs to figure out what is going on?

Thanks.

Best Answer

sshd generally logs via syslog. By default it looks to the AUTH or AUTHPRIV facility, although you can modify this via the SyslogFacility configuration option in your sshd_config file.

To figure out where syslog messages go, look in /etc/syslog.conf, which contains lines similar to:

authpriv.*          /var/log/secure

This example would send all AUTHPRIV messages to /var/log/secure. You'll find something similar on your system.

Related Solutions

Ssh – find logs for SFTP

The sftp-server is an external binary. It's likely not inside your chroot environment.

If you modify sshd_config to use the internal subsystem (if available) it should start working with chroot.

Linux – Where is ssh daemon log file

Try to check:

/var/log/auth.log

Try to edit this options at sshd_config

# Logging
#SyslogFacility AUTH    # <- says to log auth.log, check syslog.conf for additional configuration, or even update remove syslog and install rsyslog.
#LogLevel INFO          # <- edit verbosity

Best Answer

Related Solutions

Ssh – find logs for SFTP

Linux – Where is ssh daemon log file

Related Topic