On Thu, 2009-10-08 at 16:51 +0000, Alexander Eremin wrote:
> On Thu, 2009-10-08 at 18:16 +0530, Arun Tomar wrote:
> > Hi!
> >
> > i was trying to log the failed login attempts to my opensolaris box and
> > i tried the methods specified in the book, "OpenSolaris bible " page
> > 421,
> >
> > In short this is what it says,
> >
> > To enable failed login log, first add the following lines
> > to /etc/default/login:
> >
> > SYSLOG=YES
> > SYSLOG_FAILED_LOGINS=0
> >
> > edit:
> > /etc/syslog.conf
> >
> > auth.notice /var/adm/authlog
> >
> > touch /var/adm/authlog
> > ls -l /var/adm/authlog
> > chmod 600 /var/adm/authlog
> > chgrp sys /var/adm/authlog
> > ls -l /var/adm/authlog
> > svcadm refresh system-log
> >
> > but i get the following error and nothing gets logged
> > into /var/adm/authlog
> >
> > Oct 8 07:49:59 opensolaris syslogd: line 42: unknown priority name
> > "notice /var/adm/authlog"
> > Oct 8 07:49:59 opensolaris syslogd: line 48: WARNING: loghost could not
> > be resolved
> > Oct 8 08:55:08 opensolaris oss_sadasupport: [ID 517056 kern.warning]
> > WARNING: ldi_open_by_name("/dev/dsp") failed, errno=19
> > Oct 8 08:55:15 opensolaris last message repeated 1 time
> > Oct 8 18:08:10 opensolaris syslogd: line 42: unknown priority name
> > "notice /var/adm/authlog"
> > Oct 8 18:08:10 opensolaris syslogd: line 48: WARNING: loghost could not
> > be resolved
> >
> > please help.
> >
> > regds,
> > Arun Tomar.
> >
> > _______________________________________________
> > belenix-discuss mailing list
> > http://mail.opensolaris.org/mailman/listinfo/belenix-discuss
> > http://groups.google.com/group/belenix-discuss
>
> WARNING: loghost could not be resolved.
> Check your /etc/hosts, must be
>
> 127.0.0.1 localhost loghost
hi!
I"ve added the loghost to the /etc/hosts, now the warning is gone, but
the error persists.
Oct 8 18:43:25 opensolaris syslogd: line 42: unknown priority name
"notice /var/adm/authlog"
Oct 8 18:45:06 opensolaris syslogd: line 42: unknown priority name
"notice /var/adm/authlog"
output of my /etc/syslog.conf
# i saw that auth.notice is already present on the line below by default
#but it still whether it's there or not it doesn't log the messages.
#*.err;kern.notice;auth.notice /dev/sysmsg
*.err;kern.notice /dev/sysmsg
*.err;kern.debug;daemon.notice;mail.crit /var/adm/messages
*.alert;kern.err;daemon.err operator
*.alert root
*.emerg *
auth.notice /var/adm/authlog
# if a non-loghost machine chooses to have authentication messages
# sent to the loghost machine, un-comment out the following line:
#auth.notice ifdef(`LOGHOST', /var/log/authlog, @loghost)
mail.debug ifdef(`LOGHOST', /var/log/syslog, @loghost)
#
# non-loghost machines will use the following lines to cause "user"
# log messages to be logged locally.
#
ifdef(`LOGHOST', ,
user.err /dev/sysmsg
user.err /var/adm/messages
user.alert `root, operator'
user.emerg *
)
arun
