Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Unsuccessfull Login Attempts

Status
Not open for further replies.

Mag0007

MIS
Joined
Feb 15, 2005
Messages
829
Location
US
lsuser -a unsuccessful_login_count gantan
someuser unsuccessful_login_count=8


Is there a way to find out when these attemps were made, or get a list?


 
Or a little cleaner:

last -8 -f /etc/security/failedlogin gantan


Rod Knowlton
IBM Certified Advanced Technical Expert pSeries and AIX 5L
CompTIA Linux+
CompTIA Security+

 
The unsuccessful_login_count attribute is also driven by unsuccessful "su" attempts. You will need to review /var/adm/sulog as well.

-glenn
 
su" does not effect unsuccessful_login_count, at least in AIX 5.1.

You should be monitoring /var/adm/sulog, but not because of the question at hand.

Rod Knowlton
IBM Certified Advanced Technical Expert pSeries and AIX 5L
CompTIA Linux+
CompTIA Security+

 
Rod,
I am running 5.1.0.0 ML 05
The account I attempt to su to has the "loginretries" attribute set to three (3). When I fail, the unsuccessful_login_count increases by one (1) and a fail entry appears in the sulog.

Any thoughts as to why I get different results than your own?

-glenn
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top