OT: Capturing failed login attempts

[Lerebours, Jose]

Using SCO 5.0.6

Q. Where can I go to check for failed login attempts?
Q. How can I make sure user does not use same passwd?
Q. Is there a way to warn an user of password nearing
   expiration?


If I `grep` "failed" off /usr/adm/syslog, all I get is
the IP address where the login was attempted.  I need 
to know the user ID that failed.


Thank you all in advance!


--
Jose Lerebours