cancel
Showing results for 
Search instead for 
Did you mean: 

Log Files

SOLVED
Go to solution
AL_3001
Regular Advisor

Log Files

Gurus,

A simple question, but at times get tricky.

I do not have root access on the server, but need to check for login failure (switch user failure). As i cannot view sulog file, it requires root access, i used to check the syslog file.

The situation is, syslog file is zipped and i cannot unzip as a normal user.

Which other files contain login failure info?

Thanks.

Regards,
Ashish
8 REPLIES
Suraj K Sankari
Honored Contributor

Re: Log Files

hi,
login failure ?
try "lastb"

suraj
Jozef_Novak
Respected Contributor

Re: Log Files

No possibility to install sudo in order to get temporary root access ?

J.
Ganesan R
Honored Contributor

Re: Log Files

Hi Ashish,

Normally /var/adm/btmp contains all the bad logins which can be read by lastb command.

You need to check only the syslog file to know the switch user failures.
Best wishes,

Ganesh.
AL_3001
Regular Advisor

Re: Log Files

>> Suraj -> lastb requires root login

>> Jozef_Novak -> I am just a little curious, will get root access soon. Still would want to know the other locations, if any.

>> Ganesan -> btmp file cannot be read as it requires root login
Bill Hassell
Honored Contributor

Re: Log Files

The failed login information is stored in only one location: /var/adm/btmp and is a binary file. However, it is a security risk to set the permissions of this file to anything more open than 600. This file contains mistakes and some of them contain plain-text passwords because the user was not paying attention. The sulog has the same restrictions and should remain restricted to root only.


Bill Hassell, sysadmin
Dennis Handly
Acclaimed Contributor

Re: Log Files

>syslog file is zipped and i cannot unzip as a normal user.

If you can read the file you can unzip it elsewhere.
Viktor Balogh
Honored Contributor
Solution

Re: Log Files

hi,

Dennis has right. if you can read the file you can unzip it too. I recommend gzcat for reading gzipped files...
****
Unix operates with beer.
AL_3001
Regular Advisor

Re: Log Files

Viktor,

gzcat is correct. Thanks, it gives me my answer.

Thank You to all for their valuable inputs.

Cheers.