Why does sshd sometimes log local time, other times UT

RandomTroll · 10-10-2014, 10:12 PM

I've been inspecting /var/log/secure today. I find that sometimes sshd records the time in local time, other times in universal time (aka CUT, UCT, GMT), sometimes alternating one record after another in response to a single connection. I know that other daemons can also record their records in /var/log/secure but all of these are identified as [sshd].

DarrenDrapkin · 11-08-2014, 12:45 PM

It is entirely possable that you have several copies of sshd running. It is also possable that you have found a bug in sshd. Have you tried stopping and starting sshd? If you have two or more log entires at the very end of the log about sshd starting, then you have two servers with the same name and should uninstall one of them. This is applies to just about any server not just sshd. There are other posabilities, try man -k sshd. To help others come up with more possabilities can you post some log entries here ?

RandomTroll · 11-09-2014, 12:07 AM

Of course I read the man pages. I have one instance of sshd running. It was pam (password authentication module? - Slackware doesn't have it) which, apparently, sshd calls on this system; it logs local time.