touch-packages team mailing list archive

Thread
Date

[Bug 345074] Re: Failed login attepts not being logged in /var/log/btmp

To: touch-packages@xxxxxxxxxxxxxxxxxxx
From: sffroelich <345074@xxxxxxxxxxxxxxxxxx>
Date: Wed, 30 Sep 2015 23:05:11 -0000
Reply-to: Bug 345074 <345074@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

i found that my Ubuntu systems were not logging failed ssh logins, apparently due to the default file permissions on /var/log/btmp  660.  i heard that sshd willnot log to a file with group writeable perms; when i changed the perms to 600, lastb started reporting failed attempts.  
-sff

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to sysvinit in Ubuntu.
https://bugs.launchpad.net/bugs/345074

Title:
  Failed login attepts not being logged in /var/log/btmp

Status in sysvinit package in Ubuntu:
  New

Bug description:
  Description:	Ubuntu 8.04.2
  Release:	8.04

  lastb command should return failed login attempts, but returns nothing - both as user and root.
  I have tried to log in with wrong passwords, wrong username, /var/log/btmp is still empty.
  "last" works fine - but "lastb" does not work at all.

  faillog is also not showing anything

  The only place I could find login attempts is /var/log/auth.log

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sysvinit/+bug/345074/+subscriptions