System Administration Guide

How to Save Failed Login Attempts

  1. Become superuser.

  2. Create the loginlog file in the /var/adm directory.


    # touch /var/adm/loginlog
    
  3. Set read and write permissions for root on the loginlog file.


    # chmod 600 /var/adm/loginlog
    
  4. Change group membership to sys on the loginlog file.


    # chgrp sys /var/adm/loginlog
    
  5. Make sure the log works by attempting to log into the system five times with the wrong password after the loginlog file is created. Then display the /var/adm/loginlog file.


    # more /var/adm/loginlog
    pmorph:/dev/pts/0:Fri Jan 13 08:55:23 1996
    pmorph:/dev/pts/0:Fri Jan 13 08:55:31 1996
    pmorph:/dev/pts/0:Fri Jan 13 08:55:39 1996
    pmorph:/dev/pts/0:Fri Jan 13 08:55:50 1996
    pmorph:/dev/pts/0:Fri Jan 13 08:56:00 1996
    #