FTP without "login from" - pam_authenticate: Authentication failed

[Kenny Loh]

Hi all,
I having problem with an ftp id, the password specified in the script for ftp is correct and I tested it manually. But a while later(maybe 1 day)the account will be locked out.
I search all over the syslog and found this:-

pam_authenticate: Authentication failed
User ftpuser: Login incorrect
FTP session closed

Only three lines, I supposed there is one message saying FTP Login from which IP address but there is not any.

Anyone can help?

[Steven E. Protter]

Shalom,

Submit the script after changing the user id and paassord in it.

This is probably a script fault or bad (possibly invisible) characters in the password line of your script.

SEP

[Kenny Loh]

Sorry for my ignorance, I just learnt that failed login will not be logged. Is there anyway to turn on for loggin failed ftp login?

[Sumit Ghosal]

Hi,

To log ftp activities , edit /etc/inetd.conf and add "-lv" after "ftpd"

[mavrick]

Hi Kenny

Check the syslog.conf is properly set for the
ftp logging.The ftp /telnet/ssh IPs will
log in the /var/adm/syslog/syslog.log

Thanks......

[Kenny Loh]

Thanks all for reply, I know how to log FTP but what I want to check is the IP address of unsuccessful login attemps, which syslog will not capture as syslog capture IP address only for successul login.