I am trying to log bad login attempts using /var/log/btmp, and the lastb
command. This does not seem to work.
I am running RH 4.2, kernel 2.0.33, shadow passwords and pam. I have a
/etc/login.defs, but it contains no entries. Looking at man login.defs, I see
references to a 'faillog' but no explanation of what program would read it.
All access from outside my machine does end up in /var/log/secure, but that is
not quite the same thing.
Does anyone have btmp and lastb working under RH 4.2 using shadow passwords?
If so, can you write to me so we can discuss what , if any changes, you needed
to make to a stock RH 4.2 system to get it to work, or figure out what versions
of various RPM's you are running?
I seem to recall posts to USENET about this being broken in some Linux
distro's, but can't recall details. Most posts on the issue talk about simply
touching /var/log/btmp and making sure it is read/write by root only. Been
there, done that.
Tom Porter [EMAIL PROTECTED]
------------------------------------------------------------------------
"I do believe that where there is a choice only between cowardice and
violence, I would advise violence." Mahatma Gandhi
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com/RedHat-FAQ /RedHat-Errata /RedHat-Tips /mailing-lists
To unsubscribe: mail [EMAIL PROTECTED] with
"unsubscribe" as the Subject.
