Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I understand that by adjusting the LogLevel in /etc/ssh/sshd_config I can log the fingerprints when authentication is successful, but what I would like to do is to see a fingerprint of a key that was in fact unsuccessful.

The practical problem is clueless clients who connect to the server using the wrong key and if I could see the fingerprint when authentication fails that would help a lot.

The OS is Ubuntu Precise Pangolin, OpenSSH server from the package openssh-server (1:5.9p1-5ubuntu1).

Is this possible to do?

share|improve this question

If I understand you correctly, I believe if you set the loglevel to say "verbose" the information printed in auth.log will only show a failed publickey for a user from an IP address and the port number. I don't believe there is a loglevel which will allow you to see the publickey that was unsuccessful

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.