Solved

Log of failed authentication attempts

Posted on 2006-12-01
1
470 Views
Last Modified: 2010-04-20
Is there a way to configure a log that will show what username and password credentials were provided when attempting to log into a linux machine and failing?

Ergo, can I see what people are trying to use to log into a linux box that they are not supposed to be logging into?
0
Comment
Question by:DrDamnit
1 Comment
 
LVL 2

Accepted Solution

by:
jianmcgowan earned 500 total points
ID: 18058996
There should be a log of failed login attempts in /var/log/auth.log.  I don't think there's any way to display the passwords - that would be horrible from a security perspective.

Something like honeyd, http://www.honeyd.org, might be a useful thing to research if you think you have internal people up to no good.  It can log all packets sent and received, presumably including the passwords tried.

Hope this helps,
Ian
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

If you use Debian 6 Squeeze and you are tired of looking at the childish graphical GDM login screen that is used by default, here's an easy way to change it. If you've already tried to change it you've probably discovered that none of the old met…
Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:

790 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question