OT: Capturing failed login attempts

[Bill Campbell]

On Mon, Sep 12, 2005, Lerebours, Jose wrote:
>Using SCO 5.0.6
>
>Q. Where can I go to check for failed login attempts?
>Q. How can I make sure user does not use same passwd?
>Q. Is there a way to warn an user of password nearing
>   expiration?
>
>
>If I `grep` "failed" off /usr/adm/syslog, all I get is
>the IP address where the login was attempted.  I need 
>to know the user ID that failed.

If you're using openssh for secure shell logins, you will see failed login
attempts in the logs, complete with the login names tried.

NOTE:  The openssh on the server is doing the logins, it doesn't require
anything on the clients connecting.

Bill
--
INTERNET:   bill at Celestial.COM  Bill Campbell; Celestial Systems, Inc.
UUCP:               camco!bill  PO Box 820; 6641 E. Mercer Way
FAX:            (206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676
URL: http://www.celestial.com/

If you want government to intervene domestically, you're a liberal.  If you
want government to intervene overseas, you're a conservative.  If you want
government to intervene everywhere, you're a moderate.  If you don't want
government to intervene anywhere, you're an extremist -- Joseph Sobran