how to log all the fail logins

From: Cody Wang (cwang@berkshirecc.edu)
Date: Thu Jun 02 2005 - 14:32:59 EDT


Hi,

How could i setup event log to see all the fail login users? The
current setup is, but I don't see any activity.

kern.debug /var/adm/syslog.dated/kern.log
        
user.debug /var/adm/syslog.dated/user.log
        
mail.debug /var/adm/syslog.dated/mail.log
        
daemon.debug /var/adm/syslog.dated/daemon.log
        
auth.debug /var/adm/syslog.dated/auth.log
        
auth.crit;syslog.debug /var/adm/syslog.dated/syslog.log
        
mail,lpr.debug /var/adm/syslog.dated/misc.log
        
lpr.err /var/adm/syslog.dated/lpr.log

0 -rw-r----- 1 root adm 0 Jun 2 13:58 auth.log
        
0 -rw-r----- 1 root adm 0 Jun 2 13:58 daemon.log
        
0 -rw-r----- 1 root adm 0 Jun 2 13:58 kern.log
        
0 -rw-r----- 1 root adm 0 Jun 2 13:58 lpr.log
        
0 -rw-r----- 1 root adm 0 Jun 2 13:58 mail.log
        
1 -rw-r----- 1 root adm 95 Jun 2 14:00 syslog.log

Best Regards,
Cody Wang

Database Programmer Analyst
Berkshire Community College
1350 West Street
Pittsfield, MA 01201
413-499-4660 x497



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:50:19 EDT