SUMMARY: CDE dtlogin - do not log failed login attempts

Hello -

According to Sun, the /var/adm/loginlog file is for remote
login attempts only (rlogin or telnet), but not for local
console login attempts (CDE, GNOME or failsafe).  There 
are two options for logging failed login attempts from the
system console:  turn on BSM or add a debug option to the
dtlogin service_name for the Authentication Services Module in
/etc/pam.conf along with adding user.debug to /etc/syslog.conf.

Neither one is a great option, but at least I could get it to work.

BTW  I got no replies to my message, other learning that several 
people are out of the office.

Debbie

Original message:
> I did not see an answer or summary for this question,
> but am having an issue with this now.  Is it possible
> to get CDE to properly log failed login attempts?
> 
> I can get failed login attempts via remote logins to
> be logged, but not directy at the CDE console.
> 
> Thanks in advance for any help,
> Debbie
> 
> Forwarded message:
> > From: "Salum, Felipe" <felipe.salum@eds.com>
> > To: "'sunmanagers@sunmanagers.org'" <sunmanagers@sunmanagers.org>
> > Subject: CDE dtlogin - do not log failed login attempts
> > Date: Thu, 8 Nov 2001 07:20:52 -0500
> > 
> > Hi people.
> > 
> > I have a doubt. 
> > 
> > Users that log in locally using CDE do not have their failed login attempts
> > written in /var/adm/loginlog or whatever file that failed login attempts are
> > written in a envinronment running hp, sun, aix ??
> > What do I need to do to make this log working ?
> > 
> > My conclusion is that dtlogin is not secure, if it doesnt log anything the
> > user can try various passwords to crack an account.
> > 
> > Thanks in advance,
> > 
> > Felipe Salum, SCSA
> > Security and Systems Administration
> > EDS Brazil
> > 
> > _______________________________________________
> > sunmanagers mailing list
> > sunmanagers@sunmanagers.org
> > http://www.sunmanagers.org/mailman/listinfo/sunmanagers
> > 
> 
> 
> -- 
> + Debbie Tropiano -- debbie_at_icus.com -- http://www.icus.com/personal.html  +
> | Mommy to   Nathan b: 8/17/1995,   ^Sara^ b: 10/25/2000 d: 11/7/2000   &  |
> | Leah b: 10/17/2001 a: 9/26/2002 "God shows His opposition to cancer and  |
> | birth defects, not by eliminating them or making them happen only to bad |
> | people (He can't do that), but by summoning forth friends and neighbors  |
> + to ease the burden and to fill the emptiness."     -- Harold S. Kushner  +
> 


-- 
+ Debbie Tropiano -- debbie_at_icus.com -- http://www.icus.com/personal.html  +
| Mommy to   Nathan b: 8/17/1995,   ^Sara^ b: 10/25/2000 d: 11/7/2000   &  |
| Leah b: 10/17/2001 a: 9/26/2002 "God shows His opposition to cancer and  |
| birth defects, not by eliminating them or making them happen only to bad |
| people (He can't do that), but by summoning forth friends and neighbors  |
+ to ease the burden and to fill the emptiness."     -- Harold S. Kushner  +
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers