failed login attempts
 

Hi,
How can failed user attempts logs can be seen.

Also why /etc/login.defs file is used ?

Thanks

- /var/log/secure
- man 5 login.defs

... and if /var/log/secure does not exist, try /var/log/messages

... or /var/log/auth.log

I am bit confused, the actual file is /var/log/secure or /var/log/auth.log

Thanks

It depends on distribution/logging application? In Ubuntu is /etc/syslog.conf where are defined paths to logs depending on priority and facility.

I am using redhat 5

Thanks

Then /var/log/secure