[arch-general] /var/log/btmp empty
Hello folks My failed login attempts aren't being recorded, and lastb shows no output. The permissions are correct: -rw------- 1 root root 0 Nov 15 06:39 /var/log/btmp Reading a previous message on the mailing list, i tried setting FTMP_FILE /var/log/btmp in /etc/login.defs. But this gives the following error (right after typing the username on a tty): configuration error - unknown item 'FTMP_FILE' (notify administrator) So two questions: 1. Why isn't the option being recognised, even though it is present in the man page for login.defs? 2. How do i enable logging to /var/log/btmp? -- O< ascii ribbon campaign - stop html mail - www.asciiribbon.org
On Tue, 21 Feb 2012 21:54:42 +0530 gt <codered12@gmail.com> wrote:
Hello folks
My failed login attempts aren't being recorded, and lastb shows no output.
The permissions are correct:
-rw------- 1 root root 0 Nov 15 06:39 /var/log/btmp
Reading a previous message on the mailing list, i tried setting
FTMP_FILE /var/log/btmp
in /etc/login.defs. But this gives the following error (right after typing the username on a tty):
configuration error - unknown item 'FTMP_FILE' (notify administrator)
So two questions:
1. Why isn't the option being recognised, even though it is present in the man page for login.defs?
2. How do i enable logging to /var/log/btmp?
I think FTMP_FILE is obsolete. Logging of failed login attempts is handled by pam. Try running faillog(8)... Also I am not sure if /var/log/btmp has to be kept at all. -- Leonid Isaev GnuPG key ID: 164B5A6D Key fingerprint: C0DF 20D0 C075 C3F1 E1BE 775A A7AE F6CB 164B 5A6D
On Thu, Feb 23, 2012 at 12:11:06PM -0600, Leonid Isaev wrote:
I think FTMP_FILE is obsolete. Logging of failed login attempts is handled by pam. Try running faillog(8)... Also I am not sure if /var/log/btmp has to be kept at all.
Thanks, i didn't know about faillog. Unfortunately, it doesn't behave exactly like lastb, it only displays the failed attempts after the last successful login. But something is better than nothing :) -- O< ascii ribbon campaign - stop html mail - www.asciiribbon.org
participants (2)
-
gt
-
Leonid Isaev