AIX

Hi agasamapetilon,
I noticed the same thing. I tried two logins that failed and the value still shows zero although when I am successful it displays my last unsuccessful login which comes from the failedlogin file. Maybe someone with more knowledge on this could explain.

The number of unsuccessful logins you get from the lsuser command is used for disabling account access (the loginretries value). When you log in successfully, it is reset to 0.

The fwtmp command I posted earlier is really not that difficult and gives you some good information. Further, you can use that command regularly via cron (or a job scheduler like autosys) to archive failed logins and keep the file small for quick viewing.

Padow, thanks for the response. This makes it a lot more clear for everyone here. Surely it helps a lot!