security - change logged failed attempts to 3 before logging to syslog

[Ratzie]

Is there a setting that can be set, failed logging attempts will only log to the syslog after they have failed 3 time in a row?

Right now I have to report any failed passwd entry in the syslog, and if I fat finger my passwd once, I have to create a report.

[Steven E. Protter]

Shalom,

If you wish to convert your system to trusted, this is the default configuration.

lastb -R

Will produce a report of all bad login attempts.

I can give you a script that analyzes lastb output and disables any account that has 3 bad attempts. It will take some time for me to find the script so let me know.

SEP

[Steven E. Protter · Accepted solution]

Okay it was easier to find the script. It will need minor tweaks.

SEP