Re: Failed logins isn't logged?

[Daniel Andersson <list@daniel-gr-andersson.com>]

On 02/17/2011 05:31 PM, Camaleón wrote:
> On Thu, 17 Feb 2011 17:13:14 +0100, Daniel Andersson wrote:
>
> > On 02/17/2011 04:27 PM, Camaleón wrote:
> > > On Thu, 17 Feb 2011 13:49:32 +0100, Daniel Andersson wrote:
> > >
> > > > I'm curious why failed logins isn't logged by default. This is basic
> > > > security?
> > >
> > > (...)
> > >
> > > It is enabled by default in Lenny:
> > >
> > > sm01@stt008:~$ grep FAILLOG_ENAB /etc/login.defs
> FAILLOG_ENAB		yes
> > > Gretings,
> > Thanks!
> >
> > I misinterpreted the text.
> >
> > How do I view the log file?
> > /var/log/faillog
>
> AFAIK, failed logins fall under "/var/log/auth*", so you can (as root):
>
> stt008:~# grep -i failed /var/log/auth*
>
> Greetings,

Thank you very much!

Exactly what I needed right.


/Daniel