Solved

Log of failed authentication attempts

Posted on 2006-12-01
1
468 Views
Last Modified: 2010-04-20
Is there a way to configure a log that will show what username and password credentials were provided when attempting to log into a linux machine and failing?

Ergo, can I see what people are trying to use to log into a linux box that they are not supposed to be logging into?
0
Comment
Question by:DrDamnit
1 Comment
 
LVL 2

Accepted Solution

by:
jianmcgowan earned 500 total points
ID: 18058996
There should be a log of failed login attempts in /var/log/auth.log.  I don't think there's any way to display the passwords - that would be horrible from a security perspective.

Something like honeyd, http://www.honeyd.org, might be a useful thing to research if you think you have internal people up to no good.  It can log all packets sent and received, presumably including the passwords tried.

Hope this helps,
Ian
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

If you use Debian 6 Squeeze and you are tired of looking at the childish graphical GDM login screen that is used by default, here's an easy way to change it. If you've already tried to change it you've probably discovered that none of the old met…
Linux users are sometimes dumbfounded by the severe lack of documentation on a topic. Sometimes, the documentation is copious, but other times, you end up with some obscure "it varies depending on your distribution" over and over when searching for …
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now