I'm need so technical adivce on a S

[Itezz]

I'm need so technical adivce on a Solaris 8 loginlog problem. Anyone available for assistance?

 

[bluedragon2]

What's your problem?



Blue

If I wasn't Blue, I would just be a Dragon...

 

[Itezz]

I am trying to turn on the loginlog under Solaris 8. I've setup the /var/adm/loginlog, permissions 700, owner root, group sys. I've also modified the /etc/default/login and rebooted the system. When logging into the console, it still does not log. Oh yeah, also modified the /etc/syslog.conf. Any ideas?

 

[bluedragon2]

That shhould be all you need to do. You do know that it will only log if there are a number (believe default is 5) unsuccesful login attempts in a row.






Blue

If I wasn't Blue, I would just be a Dragon...

 

[Itezz]

Yeah, that's why I modified the /etc/default/login. Changed the logins to 0 so that it would log. I've even tried logging in 5 times with the incorrect password. It's just not working. Maybe a patch?

 

[bluedragon2]

I just saw that you tried loging in from console. I believe it will only log those coming from daemons. Try telneting to the box with incorrect logins and see if you get a log entry.



Blue

If I wasn't Blue, I would just be a Dragon...

 

[bluedragon2]

didn't mean daemons, meant tty's

Blue

If I wasn't Blue, I would just be a Dragon...

 

[Itezz]

Yes, telnetting, ssh, etc logs. Shouldn't the loginlog also work for the console? I know the lastlog logs too but we need to have all console, including failed login attempts, write to a specific log file. Do you know of any other way to do this? Thanks for your help on this too.

 

[bluedragon2]

This may work for you:

Display a record of all logins and logouts with most recent on top.
last command:
last command looks in the /var/adm/wtmpx (binary)
Format:
last
last username
last reboot

Blue

If I wasn't Blue, I would just be a Dragon...

 

[Itezz]

Yeah, that works but is not what we need. It just doesn't show failed console login attempts.