I'm running a single system under DU 4.0b with enhanced security on, and no NIS.
I need to be able to log an alert to /dev/console when an account has been
disabled due to multiple unsuccessful login attempts.
What I've found is ....
The sialog gives an entry for each individual failure but not for the account
disabled event.
The audit log doesn't seem to be updated when the account is disabled either,
but does get updated if you run dxaccounts to re-enable it - strange.
Finally, auth.log records good logins but not bad ones.
All suggestions welcome
Thanks,
Bernie Jones
bernie.jones_at_gb.unisys.com
Received on Fri Feb 05 1999 - 15:42:10 NZDT