On Wed, Jul 27, 2011 at 9:29 AM, Renato <rennabh@xxxxxxxxx> wrote: > On Wed, 27 Jul 2011 21:52:24 +1000 > Simon Perry <arch@xxxxxxxxxxx> wrote: > > > On 27/07/11, Renato wrote: > > > > | no, didn't know it conflicted with lastb. However, stopping it > > doesn't | change the situtation, bad logins aren't logged > > to /var/log/btmp. | > > | Can I configure syslog-ng to report bad login attempts? > > > > Dude, it's not syslog-ng. > > > > Read the man pages, for example "man lastb" says: > > > > NOTES > > The files wtmp and btmp might not be found. The system only logs > > information in these files if they are present. This is a > > local configuration issue. If you want the files to be used, they > > can be created with a simple touch(1) command (for example, > > touch /var/log/wtmp). > > > > These are also clues (in the same man page): > > > > SEE ALSO > > shutdown(8), login(1), init(8) > > > > > sorry, I think I don't understand what you're saying, maybe my english > isn't very good. the files /var/log/wtmp and /var/log/btmp are indeed > present in my system > > cheers > renato > Has your syslog-ng.conf file been updated to use lastb? -- Jason
