how to log invalid login attempts

[hip]

Hi,
we're using SCO UnixWere 7.1 and we have users that login to a profile and
that profile kicks off an application. Is there an easy way of being able to
track invalid attempts to open that profile?
many thanks,
Mark.

 

[gheist]

usually we edit /etc/syslog.conf and re(start) syslogd

 

[Required]

Have a look at loginlog.

You can define LOGFAILURES in the file /etc/default/login (the default value is 5). All the unsuccessful login attempts after LOGFAILURES will be logged in /var/adm/loginlog (an ASCII file containing one record -or line- per attempt and including login name, tty and time).
You must create the file loginlog to enable logging. That file must belong to user root and group sys and have read and write permissions only for its owner.