su log file

[samson das s]

dear all
iam new to linux
please tell me how to configure a sulog file for every su attempts

[Vitaly Karasik_1]

you already have "su" info in /var/log/messages

[Ivan Krastev]

Another log file (in debian) is /var/adm/auth.log.

Oct 19 10:58:44 debian su[21110]: + pts/0 user1:root
Oct 19 10:58:44 debian su[21110]: (pam_unix) session opened for user root by user1 (uid=1000)


regards,
ivan

[Vitaly Karasik_1]

well, in fact it depends on /etc/syslog.conf that specific distro is using.

[monu_1]

Good day,

I want to clarify that SMTP log is same as maillog.

IF NOT WHERE I CAN SEE SMTP LOG FILE.

With Bregds,
Manoj

[Ivan Ferreira]

By default, only correct "su" sessions are logged. If you want to log ALL su attemps, then you must configure pam's "pam_warn" module, like this:

/etc/pam.d/su

auth required pam_warn.so