Operating System - HP-UX
1748134 Members
3553 Online
108758 Solutions
New Discussion юеВ

Re: How do we get timestamps on failed authentication log in HPUX 11i?

 
SOLVED
Go to solution
Bob Schommer
New Member

How do we get timestamps on failed authentication log in HPUX 11i?

I have a system that must run in untrusted mode. I need failed logons timestamped in the log. So far I can only get the failures not the timestamp nor lockout.
6 REPLIES 6
James R. Ferguson
Acclaimed Contributor
Solution

Re: How do we get timestamps on failed authentication log in HPUX 11i?

Hi Bob:

Do you have a '/var/adm/btmp' file? If not, touch to create and make sure that the permissions are 600 with an ownership of 'root'. Then 'lastb' should show failed logins and timestamps.

Regards!

...JRF...
OFC_EDM
Respected Contributor

Re: How do we get timestamps on failed authentication log in HPUX 11i?

Look at enabling auditing.

Could also look at the lastb -R command and see if its of use to you.

Or you could do something crazy and put timestamps manually scheduled via cron / at into the syslog. Then you'd know within a range when failed logins occur.

The Devil is in the detail.
OFC_EDM
Respected Contributor

Re: How do we get timestamps on failed authentication log in HPUX 11i?

The logger command can be used to put messages into the syslog with a timestamp.

Wouldn't do this really. But if you're desparate for something this may do the trick.
The Devil is in the detail.
OFC_EDM
Respected Contributor

Re: How do we get timestamps on failed authentication log in HPUX 11i?

ok Ignore my stuff about syslog.

the lastb will give all you need.

I'll go get a coffee now and wake up :)
The Devil is in the detail.
Bob Schommer
New Member

Re: How do we get timestamps on failed authentication log in HPUX 11i?

Looks Like the lastb and the file will do what we need.
Must be a record for a solution.
Thanks
Bob Schommer
New Member

Re: How do we get timestamps on failed authentication log in HPUX 11i?

Great!!