[arch-general] bad login attempts not written to /var/log/btmp

Ionut Biru ibiru at archlinux.org
Wed Jul 27 02:37:56 EDT 2011


On 07/27/2011 09:28 AM, Renato wrote:
> On Wed, 27 Jul 2011 08:13:49 +1200
> Ross<rosscoad at slingshot.co.nz>  wrote:
>
>> On 27/07/11 07:57, Renato wrote:
>>> Hello, maybe I don't understand how the command "lastb" should work,
>>> but no matter how many times I try to login inputting a wrong
>>> password I still get nothing but this:
>>>
>>> $ sudo lastb
>>>
>>> btmp begins Fri May  6 23:40:14 2011
>>>
>>>
>> Seems to be working ok here. Does cat /var/log/btmp show anything?
>>
>
> nope:
>
> renato at acerarch /var/log $ sudo cat btmp
> renato at acerarch /var/log $
>
> permissions seem right though:
>
> renato at acerarch /var/log $ ls -lh btmp
> -rw------- 1 root root 0 May  6 23:40 btmp
> renato at acerarch /var/log $

have you removed syslog-ng from DAEMONS?

-- 
Ionuț


More information about the arch-general mailing list