Hosting Provided By

Re: adminlog

From: Darren J Moffat <Darren.Moffat(at)Sun.COM>
Date: Fri Jan 17 2003 - 16:00:24 EST

On Wed, 15 Jan 2003, Ali Ernalbant wrote:

> I created `/var/adm/loginlog` as root to capture failed logins with

Only /bin/login uses /var/adm/loginlog. It only adds entries to that log after RETRIES failed attempts. RETRIES is set in /etc/default/login and is 5 by default.

If you are interested in failed login attempts I strongly suggest you use BSM audit instead. See bsmconv(1m) for details, you need only setup the audit class lo. The attach document shows you all you need to get started.

-- 
Darren J Moffat

TEXT/PLAIN attachment: failed_logins

Received on Mon Jan 20 00:06:38 2003

This message: [ Message body ]
Next message: Joe Kattner: "Re: adminlog"
In reply to: Ali Ernalbant: "adminlog"
In reply to Wilfred Spiegelenburg: "RE: adminlog"
Next in thread: Joe Kattner: "Re: adminlog"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:01:37 EDT