Excess permission or bad ownership on file /var/adm/btmp

[AwadheshPandey]

Dear Gurus,

I am getting following errors in syslog in one of our systems.

sshd[20667]: Failed password for apandey from 164.129.225.143 port 58767 ssh2
sshd[20667]: Excess permission or bad ownership on file /var/adm/btmp

Need your expert suggestion to solve the issue.
Regards,

Awadhesh

[Jorge Pons · Accepted solution]

Hi

what permissions have that file?
In may case:

rw------- 1 root other 12720 Apr 14 13:08 btmp

Regards, Jorge

[AwadheshPandey]

Thnaks JP for your reply.Permission is below.
# ll /var/adm/btmp
-rw------- 1 bin bin 3720 Sep 7 01:43 /var/adm/btmp

[Jorge Pons]

HI

could be owner and group problem?

[Hakki Aydin Ucar]

Did you check user apandey (I guess it is a user ?) if he experienced any password problem ssh config files ?

and besides; if timestamp is too old in logs and file is too large: you can go to trim bad login files :

# cat /dev/null > /var/adm/btmp

and to make integrity for who command send a wall everyone logout and login again.

[AwadheshPandey]

Solution:
# cat /dev/null> /var/tmp/btmp
# chmod root:other /var/tmp/btmp

Thanks every one.

Best Regards,

Awadhesh

[AwadheshPandey]

Above Solution works fine!!!