AIX

AIX

Connect with fellow AIX users and experts to gain knowledge, share insights, and solve problems.

 View Only

  • 1.  When user got locked ?

    Posted Wed March 10, 2010 02:00 AM

    Originally posted by: bhimsingh


    Hi Group ,

    Is it possible to get the timestamp when exactly the user got locked in AIX ? Like loginretries are set to 5 and when user tries 5th time with wrong password , system capture this time stamp somewhere .
    Regards
    Bhim


  • 2.  Re: When user got locked ?

    Posted Wed March 10, 2010 02:27 AM

    Originally posted by: SystemAdmin


    Check out the successful logins with "last username" and compare that with the failed logins with "who /etc/security/failedlogin | grep username"

    r/
    R


  • 3.  Re: When user got locked ?

    Posted Thu March 11, 2010 11:16 PM

    Originally posted by: SystemAdmin


    If system logging is enabled, then you should see an entry similar to:

    
Mar  6 06:19:36 dalsa1 auth|security:info syslog: pts/51: failed login attempt 

for lockesi from cps24


    in the system log. There will also be entries for failed ssh logins, though the format for these is different.


  • 4.  Re: When user got locked ?

    Posted Fri March 12, 2010 01:55 AM

    Originally posted by: bhimsingh


    Thank you Spook , its helpful .


Related Content