Solved

Log of failed authentication attempts

Posted on 2006-12-01
1
473 Views
Last Modified: 2010-04-20
Is there a way to configure a log that will show what username and password credentials were provided when attempting to log into a linux machine and failing?

Ergo, can I see what people are trying to use to log into a linux box that they are not supposed to be logging into?
0
Comment
Question by:DrDamnit
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 2

Accepted Solution

by:
jianmcgowan earned 500 total points
ID: 18058996
There should be a log of failed login attempts in /var/log/auth.log.  I don't think there's any way to display the passwords - that would be horrible from a security perspective.

Something like honeyd, http://www.honeyd.org, might be a useful thing to research if you think you have internal people up to no good.  It can log all packets sent and received, presumably including the passwords tried.

Hope this helps,
Ian
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

SSH (Secure Shell) - Tips and Tricks As you all know SSH(Secure Shell) is a network protocol, which we use to access/transfer files securely between two networked devices. SSH was actually designed as a replacement for insecure protocols that sen…
1. Introduction As many people are interested in Linux but not as many are interested or knowledgeable (enough) to install Linux on their system, here is a safe way to try out Linux on your existing (Windows) system. The idea is that you insta…
Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…
How to Install VMware Tools in Red Hat Enterprise Linux 6.4 (RHEL 6.4) Step-by-Step Tutorial

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question