I'm running SUSE 9.2 and need to automatically log user logins, including bad logins (password errors, etc.). I have sent the logging parameters in Yast and expect to see the bad logins in either /var/log/btmp (which I have defined) or in /var/log/faillog using either the lastb or faillog utilities. Bad login attempts are not being accumulated in either of these files and, in fact, the file size of these files is 0. I have the feeling that there is some flag in the system configuration that is not being set that is needed to automatically log bad login attempts (and perhaps some other logging features). My system is default SUSE 9.2 operating on an AMD Opteron 244 system. I'd like to know if anyone has experience with user logging with SUSE 9.2. In particular, were any changes made to the system configuration to get user logging to work properly? If so, what are the changes? Are there user logging issues with SUSE 9.2? I've checked the SUSE website and have found little about user logging. Is some alternative software package being used like SNARE. Note that I have thought about using SNARE, but it has not been integrated into the SUSE 9.2 package (kernel). Thank you in advance for any help. Bill Arcieri