Failed logins isn't logged?

[Daniel Andersson <list@daniel-gr-andersson.com>]

Hi all,

I'm curious why failed logins isn't logged by default. This is basic 
security?


It is mentioned in Securing Debian:

http://www.debian.org/doc/manuals/securing-debian-howto/ch4.en.html#s4.10


       FAILLOG_ENAB        yes

If you enable this variable, failed logins will be logged. It is 
important to keep track of them to catch someone who tries a brute force 
attack.



All the best
/Daniel