problem during Recording Failed Login


 
Thread Tools Search this Thread
Operating Systems Solaris problem during Recording Failed Login
# 1  
Old 07-23-2009
problem during Recording Failed Login


Dears,
i am trying to recording failed login
this is the steps which i do:-
1) touch /var/adm/logilog
2) chown root:sys /var/adm/loginlog
3) chmod 600 /var/adm/loginlog
ls -l /var/adm/loginlog
-rw------- 1 root sys 0 Jul 21 03:52 /var/adm/loginlog
4) change this value in /etc/default/login
SYSLOG_FAILED_LOGINS=1
RETRIES=1
5) restart my computer

i am try to login on my computer incorrectly more than 6 once
when i open /var/adm/loginlog i found this file is empty


what can i do to solve this problem

# 2  
Old 07-23-2009
I suspect you have not yet configured syslogd to log authentication failures to that logfile. See syslog.conf for details.
# 3  
Old 07-24-2009
Quote:
Originally Posted by hosney00ux
Dears,
i am trying to recording failed login
this is the steps which i do:-
1) touch /var/adm/logilog
2) chown root:sys /var/adm/loginlog
3) chmod 600 /var/adm/loginlog
ls -l /var/adm/loginlog
-rw------- 1 root sys 0 Jul 21 03:52 /var/adm/loginlog
4) change this value in /etc/default/login
SYSLOG_FAILED_LOGINS=1
RETRIES=1
5) restart my computer

i am try to login on my computer incorrectly more than 6 once
when i open /var/adm/loginlog i found this file is empty


what can i do to solve this problem
Did you login with ssh?

it works for /dev/console telnet not ssh
# 4  
Old 07-26-2009
in /etc/syslog.conf, do this:-
uncomment the following lines.
*.err;kern.notice;auth.notice /dev/sysmsg
# if a non-loghost machine chooses to have authentication messages
auth.notice ifdef(`LOGHOST', /var/log/authlog, @loghost)
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Solaris

Dynamically ban ip after failed login

Hello, I need some help with network/firewall settings in Solaris 11.3. What I want to achieve is that if someone tries to log in to my server and fails I want that IP to be banned for some time. So if a computer/user tries to login to my ssh-server on a specified port (normally 22) and... (2 Replies)
Discussion started by: Zorken
2 Replies

2. Red Hat

Login failed in Redhat Enterprise 6.2

When i finished installation the Redhat Enterprise Linux 6.2, and login to the system, I can't login although username: root and Password correct. I install on the Hp Blade Server. I don't know why. How to fix this error? who can help me? :confused: Thanks! (3 Replies)
Discussion started by: dinhdangnd
3 Replies

3. AIX

Clear failed login count

What's actually the difference between these two command: 1) chsec -f /etc/security/lastlog -a "unsuccessful_login_count=0" -s username 2) chuser unsuccessful_login_count=0 username Are there any impact on executing either one of those command to clear/reset the failed login count in AIX?... (2 Replies)
Discussion started by: ph4nt0m227
2 Replies

4. Solaris

Console Login Failed..

Dear Unix Team, This is sudhansu once again. I need some tips on below issue. Sometimes we got calls from customer that their console got hangged means they are not able to access the server through console ip. in that case "resetsc -y" will resolve the issue. 2. But couple of days... (2 Replies)
Discussion started by: sudhansu
2 Replies

5. Solaris

Solaris 2.6 failed login logging

Holla! Sorry to spam the board with all my Solaris 2.6 questions (I just found this forum). My most recent problem is that not ALL failed log-ins are getting logged in /var/log/authlog. It seems to work fine for the "su" command from a non-root user, but the actual "login" command or a desktop... (4 Replies)
Discussion started by: rrossorr
4 Replies

6. Windows & DOS: Issues & Discussions

Application failed when remote login

I have an application (EXE file) in a Windows 2003 server. Through a DOS batch script, I called that application file using UNC path and working fine when locally login. But got failed when I tried the same batch script on remote login. The login id has been provided all the below rights: - Log on... (0 Replies)
Discussion started by: r_sethu
0 Replies

7. Solaris

FTP login failed.

Hi guys, Can you please help me. I have SUN V100 server running solaris 8. I also have a Redhat Linux 6.2 machine and a windows XP machine on the network. I'm trying to copy files from the Linux and XP machines to the V100 server. When I try to ftp to the solaris machine, I'm challenged... (2 Replies)
Discussion started by: Stin
2 Replies

8. UNIX for Advanced & Expert Users

failed ssh login with keys

Hi all, i have generated a pair of keys so that i can login via SSH without entering my password. I am using putty to login. After putting the public key on the server,then logging through putty, i get the message "Server refused our key" on screen. At the same time, /var/log/secure is... (3 Replies)
Discussion started by: new2ss
3 Replies

9. Solaris

Last Failed Login

Hi, Would appreciate it if someone could shed me some light here as I'm yet to find any related information in this forum with regards to my problem. Basically, I would like to display "Last Unsuccessful login" information when a user successfully logs-in to the system. I can't seem to find... (2 Replies)
Discussion started by: gilberteu
2 Replies

10. AIX

failed login time limit

Hello, we had a situation where an account was locked out due to too many failed login attempts. From the logs (failedlogin, etc) it appears that AIX 'remembered' the failed login attempts from the past month or so. does anyone know where this is set, or how long it will remember the number of... (2 Replies)
Discussion started by: zuessh
2 Replies
Login or Register to Ask a Question