System Administration Guide
Chapter 5, Maintaining system security

Logging unsuccessful login attempts

Logging unsuccessful login attempts

You have the option of logging consecutive unsuccessful login attempts made on a tty in a single session. (A session is limited to five attempts -- a new session is started after the defined delay between login sessions elapses.)

To start logging, create the file /usr/adm/loginlog. The information is logged like this:

   humbert:/dev/tty03:Thu Aug 11 13:15:47 1994
   humbert:/dev/tty03:Thu Aug 11 13:15:53 1994
   humbert:/dev/tty03:Thu Aug 11 13:15:58 1994
   humbert:/dev/tty03:Thu Aug 11 13:16:04 1994
   humbert:/dev/tty03:Thu Aug 11 13:16:10 1994


NOTE: The loginlog file is independent of the login limits enforced on terminals and accounts.

See also: