Monitor Invalid Logon attempts

[alan147]

Good afternoon

Is it possible to monitor invalid logon attempts in AIX 4.3.

Thanks

Alan

 

[bennotech]

You can add an entry like this into the /etc/syslog.conf file :

*.info /var/adm/daemon.out

Then refresh the syslog daemon :

refresh -s syslod

This will give you a lot of information relating to all sorts of stuff but also any logins/failed logins,

cheers
Benno

...it really does get worse than this !!

 

[bennotech]

Should probably mention that the information gathered will be in the /var/adm/daemon.out logfile.



...it really does get worse than this !!

 

[KenCunningham]

And that's it's probably worth monitoring the size of that file over a period of time in case /var starts filling up.

I want to be good, is that not enough?

 

[bennotech]

......refresh -s syslogd (not syslod ), sorry !

...it really does get worse than this !!

 

[alan147]

Thanks chaps

Alan