login logs

Bill Shankley · 07-07-2008, 05:53 AM

Hi

How can i check a log of all attempted root logins and i suppose user logins whether successful or not?

Any help is appreciated.

Cheers, Bill

Count Zero · 07-07-2008, 06:12 AM

Quote:

Originally Posted by Bill Shankley

Hi

How can i check a log of all attempted root logins and i suppose user logins whether successful or not?

Any help is appreciated.

Cheers, Bill

You have the command 'lastlog' with its various options.

Bill Shankley · 07-07-2008, 06:20 AM

Thanks, that goes someway to answering my question but what if i wanted to see a history?

Count Zero · 07-07-2008, 08:21 AM

Quote:

Originally Posted by Bill Shankley

Thanks, that goes someway to answering my question but what if i wanted to see a history?

I'm not sure of the exact file for that but have a look in the directory /var/log. That's where you find most of the logfiles though I think ssh keeps its log file in another directory. It might be auth.log you're looking for. You might also want to look into the command 'faillog' that let's you keep track of failed login attempts.

chrism01 · 07-07-2008, 08:56 PM

/var/log/secure usually, or try /var/log/messages