[SOLVED] how to see history of SSH logins which used keys

john56477 · 09-07-2013, 01:07 PM

Normal SSH login with user/password show up using linux command last
SSH login using key pairs are not shown in the printout from last

I'm not using SSH via putty, so no bash shell created.
I'm using SSH with myentunnel, for tunnel proxy purpose, to surf
the tunnel works fine, but I don't see a history of the login.

Main question
So how to see history of successful SSH logins that used key pairs and no shell created ?

Then second question,
How to see failed SSH logins that did not provide a key, or give wrong user ID and key ?
as far as I know fail2ban records failed user/password attempts

Details
Using Raspberry PI and Soft-float Debian “wheezy”

Habitual · 09-08-2013, 07:26 AM

#2

Code:

grep -i failed /var/log/*

abefroman · 09-09-2013, 05:00 PM

#1

Code:

grep Accepted /var/log/secure

This will show all connections whether a shell was opened or not.