Tracking login failures

[Art Dantonio]

Want to write failed login attempts to a file as they occur on a V5.1 2650 alpha.

[Victor Semaska]

You probably would want to enable auditing. It's best you refer to the Security Admin manual on how to do this.

Here's the URL to the on-line doc.s
http://h30097.www3.hp.com/docs/

Vic

[Mobeen_1]

Art,
You could try lastb -R (last command) and see if that helps. It basically gives you the timestamp, from where the connection came from.

regards
Mobeen

[Cortes Albertino · Accepted solution]

Hello,

Before configuring ACCOUNTING or audit features,

You could try first this;

#touch /var/adm/sialog
#chmod 644 /var/adm/sialog
#chown root.adm /var/adm/sialog

Then try and fails to login and have a look to sialog file.

Hope it helps,

Albertino Cortes

[Art Dantonio]

The sialog did the trick. Thanks