topic Re: Tracking login failures in Operating System - Tru64 Unix

Tracking login failures

Art Dantonio — Thu, 29 Apr 2004 11:10:30 GMT

Want to write failed login attempts to a file as they occur on a V5.1 2650 alpha.

Re: Tracking login failures

Victor Semaska — Thu, 29 Apr 2004 12:35:48 GMT

You probably would want to enable auditing. It's best you refer to the Security Admin manual on how to do this.

Here's the URL to the on-line doc.s
http://h30097.www3.hp.com/docs/

Vic

Re: Tracking login failures

Mobeen_1 — Thu, 29 Apr 2004 14:12:33 GMT

Art,
You could try lastb -R (last command) and see if that helps. It basically gives you the timestamp, from where the connection came from.

regards
Mobeen

Re: Tracking login failures

Cortes Albertino — Fri, 30 Apr 2004 02:37:59 GMT

Hello,

Before configuring ACCOUNTING or audit features,

You could try first this;

#touch /var/adm/sialog
#chmod 644 /var/adm/sialog
#chown root.adm /var/adm/sialog

Then try and fails to login and have a look to sialog file.

Hope it helps,

Albertino Cortes

Re: Tracking login failures

Art Dantonio — Fri, 30 Apr 2004 07:10:36 GMT

The sialog did the trick. Thanks