System Administration Guide: Security Services

How to Initiate PAM Error Reporting

  1. Edit the /etc/syslog.conf file to add any of the following entries for PAM error reporting:

    • auth.alert - Messages about conditions that should be fixed immediately

    • auth.crit - Critical messages

    • auth.err - Error messages

    • auth.info - Informational messages

    • auth.debug - Debugging messages

  2. Restart the syslog daemon, or send a SIGHUP signal to it to activate the PAM error reporting.

Example—Initiating PAM Error Reporting

In the following example, all alert messages are displayed on the console. Critical messages are mailed to root. Informational and debug messages are added to the /var/log/pamlog file.


auth.alert	/dev/console
auth.crit	'root'
auth.info;auth.debug	/var/log/pamlog

Each line in the log contains a time stamp, the name of the system that generated the message, and the message itself. The pamlog file is capable of logging a large amount of information.