[arch-general] bad login attempts not written to /var/log/btmp

[Jason Reardon]

On Wed, Jul 27, 2011 at 9:29 AM, Renato <rennabh at gmail.com> wrote:

> On Wed, 27 Jul 2011 21:52:24 +1000
> Simon Perry <arch at sanxion.net> wrote:
>
> > On 27/07/11, Renato wrote:
> >
> > | no, didn't know it conflicted with lastb. However, stopping it
> > doesn't | change the situtation, bad logins aren't logged
> > to /var/log/btmp. |
> > | Can I configure syslog-ng to report bad login attempts?
> >
> > Dude, it's not syslog-ng.
> >
> > Read the man pages, for example "man lastb" says:
> >
> > NOTES
> >       The files wtmp and btmp might not be found. The system only logs
> >       information in these files if they are present. This is  a
> > local configuration  issue.  If  you  want  the files to be used, they
> >       can be created with a simple touch(1) command (for example,
> > touch /var/log/wtmp).
> >
> > These are also clues (in the same man page):
> >
> > SEE ALSO
> >       shutdown(8), login(1), init(8)
> >
>
>
> sorry, I think I don't understand what you're saying, maybe my english
> isn't very good. the files /var/log/wtmp and /var/log/btmp are indeed
> present in my system
>
> cheers
> renato
>


Has your syslog-ng.conf file been updated to use lastb?

-- 
Jason