Re: Failed logins isn't logged?

[Camaleón <noelamac@gmail.com>]

On Thu, 17 Feb 2011 17:13:14 +0100, Daniel Andersson wrote:

> On 02/17/2011 04:27 PM, Camaleón wrote:
>> On Thu, 17 Feb 2011 13:49:32 +0100, Daniel Andersson wrote:
>>
>>> I'm curious why failed logins isn't logged by default. This is basic
>>> security?
>>
>> (...)
>>
>> It is enabled by default in Lenny:
>>
>> sm01@stt008:~$ grep FAILLOG_ENAB /etc/login.defs 
FAILLOG_ENAB		yes
>>
>> Gretings,
>>
>>
> Thanks!
> 
> I misinterpreted the text.
> 
> How do I view the log file?
> /var/log/faillog

AFAIK, failed logins fall under "/var/log/auth*", so you can (as root):

stt008:~# grep -i failed /var/log/auth*

Greetings,

-- 
Camaleón