Writting all login request to a file

[Wim Van den Wyngaert]

You will get an alarm for every invalid password. Therefore, I set audit as

Breakin: dialup, local,remote,network, detached,server
Logfailure: batch,dialup,network, subprocess,detached

This gives users the oportunity to make interactive mistakes. Only interactive breakins (e.g. 5 invalid passwords) will be reported.

[Ian Miller.]

auditing login failures is seperate from auditing logins. To record all interactive logins
SET AUDIT/AUDIT/ENABLE=LOGINS=(ALL, NOBATCH, NOSUBPROC,NODET)