how to configure syslogd do log all users connexions

[GNOM]

hi,

I want to configure syslogd so that, all users connexions (succefful or failed) be logged to the syslog file. Could someone help me ?

thanks

[Peter Godron]

Hi,
something along the lines:
auth.debug /var/adm/syslog/syslog.log
in the /etc/syslog.conf will probably start you off. Perhaps does not give you all the details you may want.

[Arunvijai_4]

Hello,

You need to edit /etc/syslog.conf file as

*.info;mail.none /var/adm/syslog/syslog.log
*.alert /dev/console
*.alert root,eric,kridle
*.emerg *

-Arun

[Cem Tugrul]

Hi Gnom,

As others mentioned /etc/syslog.conf file what you need

Good Luck,

[simon_164]

here's how:
-- vi /etc/syslog.conf
add a line at the start of the file:
user.debug /var/adm/syslog/user.log

in this way you will change the log file from syslog.log to user.log since you will be getting much more user logs.

[Muthukumar_5]

By default,

It can be monitored as,

last -> successfull login
lastb -> bad login

It will use /var/adm/wtmp and /var/adm/btmp files.

To log informations in syslog.log then,

edit /etc/syslog.conf file as,

auth.*/var/adm/syslog/syslog.log

Restart syslogd (aemon) as,

# /sbin/init.d/syslogd stop
# /sbin/init.d/syslogd start

--
Muthu

[simon_164]

you can also change the "" user.debug "" to be "" user.info "" or "" user.emerg ""

[Muthukumar_5]

I hope auth.info is enough to handle all login, su and tty based informatiosns into syslog.log file.


auth.info /var/adm/syslog/auth.log

Put this in syslog.conf and restart syslogd.

--
Muthu