Re: Sarge: Lost # of failed logins
On Fri, Jul 27, 2007 at 08:50:46 -0500, Mumia W.. wrote:
[...]
> Hmm. My /var/log/faillog was missing, but even when I 'touch' it, the
> behavior doesn't change. My FAILLOG_ENAB is also "yes" in /etc/login.defs.
Do you get the normal output when you run "faillog"?
$ faillog
Login Failures Maximum Latest On
root 0 0 07/09/07 09:44:25 +0200 tty1
florian 0 0 07/27/07 09:15:42 +0200 tty1
> In my /etc/pam.d/login file, "session optional pam_lastlog.so" is
> enabled.
I have the same entry. My impression is that this module is responsible
for the "Last login: $DATE on $TERMINAL" output. The message "n
failure(s) since last login" seems to triggered later, after pam_motd.so
and pam_mail.so have done their job.
--
Regards, | http://users.icfo.es/Florian.Kulzer
Florian |
Reply to: