Pardon me for my newness but what should be the permisssions on /var/log/faillog for the pam_tally module? we have a number of instances of the following error showing up: greenash pam_tally[2520]: Error opening /var/log/faillog for update -Russ Johns _______________________________________________ Pam-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/pam-list