failed login attempts

smilemukul · 12-14-2010, 04:00 PM

Hi,
How can failed user attempts logs can be seen.

Also why /etc/login.defs file is used ?

Thanks

kbp · 12-14-2010, 04:31 PM

- /var/log/secure
- man 5 login.defs

chrism01 · 12-14-2010, 05:01 PM

... and if /var/log/secure does not exist, try /var/log/messages

eSelix · 12-14-2010, 05:28 PM

... or /var/log/auth.log

smilemukul · 12-15-2010, 09:44 AM

I am bit confused, the actual file is /var/log/secure or /var/log/auth.log

Thanks

eSelix · 12-15-2010, 03:40 PM

It depends on distribution/logging application? In Ubuntu is /etc/syslog.conf where are defined paths to logs depending on priority and facility.

smilemukul · 12-16-2010, 11:01 AM

I am using redhat 5

Thanks

kbp · 12-16-2010, 12:46 PM

Then /var/log/secure