• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 479
  • Last Modified:

Log of failed authentication attempts

Is there a way to configure a log that will show what username and password credentials were provided when attempting to log into a linux machine and failing?

Ergo, can I see what people are trying to use to log into a linux box that they are not supposed to be logging into?
0
DrDamnit
Asked:
DrDamnit
1 Solution
 
jianmcgowanCommented:
There should be a log of failed login attempts in /var/log/auth.log.  I don't think there's any way to display the passwords - that would be horrible from a security perspective.

Something like honeyd, http://www.honeyd.org, might be a useful thing to research if you think you have internal people up to no good.  It can log all packets sent and received, presumably including the passwords tried.

Hope this helps,
Ian
0

Featured Post

[Webinar] Improve your customer journey

A positive customer journey is important in attracting and retaining business. To improve this experience, you can use Google Maps APIs to increase checkout conversions, boost user engagement, and optimize order fulfillment. Learn how in this webinar presented by Dito.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now