From: Green, Simon (SGreen@KRAFTEUROPE.COM)
Date: Mon Sep 16 2002 - 06:14:12 EDT
Because somebody tried to log on with a userid which is not known to the
system.
It would be possible to show the userid they attempted to use but this is
not done as a common mistake is to enter the password instead of the userid.
If this was recorded it would be a security risk.
Simon Green
Philip Morris ITSC Europe
AIX-L Archive at http://marc.theaimsgroup.com/?l=aix-l&r=1&w=2
AIX FAQ at http://www.faqs.org/faqs/aix-faq/
N.B. Unsolicited email from vendors will seldom be appreciated.
> -----Original Message-----
> From: Ruiz Lastra, Pedro A. (I-Q) [mailto:pruiz@ENDESA.ES]
> Sent: 16 September 2002 10:32
> To: aix-l@Princeton.EDU
> Subject: UNKNOWN_ user in /etc/security/failedlogin
>
>
> Hello all:
>
> I have an AIX 4.3.3-09. When I do a who
> /etc/security/failedlogin I
> can see some lines with a user UNKNOWN_. When can appear this
> entrys? Why
> the user is UNKNOWN_ and not the real one ?
This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 22:16:12 EDT