SYSLOG_FAILED_LOGINS

victorfeng1973@yahoo.com · *nix forums beginner Joined: 26 Oct 2005 Posts: 33

Hi,

I am trying to log the failed login. Although I set
SYSLOG_FAILED_LOGINS=3, syslog still logs the failed attempt right
after the first failure, instead of wait for the third failure. Here
are the settings

Solaris 9
/etc/default/login
SYSLOG_FAILED_LOGINS=3

/etc/syslog.conf
auth.notice /var/adm/authlog

/etc/init.d/syslog stop
/etc/init.d/syslog start

Thank you,
Victor

Michael Weis · *nix forums beginner Joined: 25 Jul 2005 Posts: 15

Hi Victor,

victorfeng1973@yahoo.com · *nix forums beginner Joined: 26 Oct 2005 Posts: 33

Hi Michael,

I do not see /var/adm/loginlog. In my case, the failed login has been
logged into /var/adm/authlog as indicated in the syslog.conf.

Victor

Mikkel Rokkær Jensen · *nix forums beginner Joined: 20 Jul 2006 Posts: 1

try
touch /var/adm/loginlog
chmod 600 /var/adm/loginlog
chgrp sys /var/adm/loginlog

RGDS
Mikkel

<victorfeng1973@yahoo.com> wrote in message
news:1153325810.044573.101680@i42g2000cwa.googlegroups.com...

Google