On Wed, 2004-03-31 at 14:53, shane c branch wrote: > Roger wrote: > <snip> > > > > I'd ask about the fail.log, is this for login failures? You might be > > able to alter syslog.conf to get the login failures logged there. > > > > The /var/log/faillog file does appear to be for login failures. I found > this: > http://www.linuxvalley.it/encyclopedia/ldp/manpage/man5/login.defs.5.php > > and enabled the value in login.defs for /var/log/faillog. I tried to > test it by logging in and screwing up on purpose, but nothing was > written to the file. > > What do I need to do to get it working? > ---- I think login.fail is the message that is sent to the user failing to log in. To actually log failures simply touch /var/log/btmp and then you can check it from cli by issuing lastb (as opposed to /var/log/wtmp and last command) Craig -- Shrike-list mailing list Shrike-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/shrike-list
