Logging failed login attempts?

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
Is it possible to configure sshd (version 3.7.1p2, in my case)  to log all
failed login attempts?

I've messed around with various syslog.conf settings and I've modified the
sshd_config file to "UseLogin yes", assuming this may be required in order
to leverage the /etc/default/login settings used by telnet.  Nothing has
worked, so far.

For auditing purposes, I've been asked to show that failed login attempts
are logged.

 Thank you


Re: Logging failed login attempts?

Quoted text here. Click to load it

Try "LogLevel VERBOSE" in sshd_config.

Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

Re: Logging failed login attempts?

Thanks for your speedy responce.  I've tried that as well, but, still no
luck.  A bit surprizing.


Quoted text here. Click to load it

Site Timeline