bad login

[muthamilan]

hi friends
I want to find bad login attempt for my Tru64(5.1.A).I know lastb command is used for HPUX.This command take data from btmp file and display the bad login attempt.now I want equilant command for lastb in Tru64.
Kindly help me.
Thanks&Reagrds
S.Muthu

[David Gutierrez_4]

Muthu,
In HPUX, there are the last, lastb commands to indicate last logins of users and ttys.

In tru64 you can use the last command to see who has logged on and compare to the who or w command to see who is currently logged on.

David

[Mark Poeschl_2]

If you can force users to use ssh to log in, it can be set up to log failed login attempts to /var/adm/syslog.dated/current/auth.log.

[Victor Semaska_3]

Another option is to set up auditing:

sysman -> Security -> Audit Configuration

Audit for 'Trusted Events'.

Vic