pam_tally file permissions error
 

Hello,

I am using the /var/log/failog set up with pam_tally on Red Hat 9.0, and it appears to be working fine for failed logons (counting them fine, and locking out the user after the max is reached). However, there are many instances of an error message in the logs showing "pam_tally[3532]: Error opening /var/log/faillog for update". I have done some research on this and came to the conclusion that pam_tally doesn't work well with users other than root. This error is happening when the user incorrectly logs back into the system after locking the screen (with xscreensaver). Is there any way around this? This won't affect counting of failed logons will it? Like I said, it seems to be working for that, but I just want to make sure. Thanks.