del-SLE wrote:
On Friday 03 Oct 2003 17:41, Jim Bonnet wrote:
What do you have in /etc/login.defs for this?
# # Enable logging and display of /var/log/faillog login failure info. # FAILLOG_ENAB yes
Jim
Yes, I have that too. And the file is updating the time stamp with failed login times as well, not just reboots. Still no changes with strings command though. Had a look at the file with vim and its one long line of ^@^@^@ and no ascii what at all. Yast, security settings has log failed and successful logins set. I also renamed the file to faillog.old to see if it was recreated, it isn't. This is on both my Suse 8.2 boxes BTW. The other one is without updates, this one is fully patched and updated.
wierd... could it(/var/log/faillog)be corrupted?? what happens if you
/var/log/faillog to clear it out.. Then try loggin in on ctl-alt-f1 and see what happens if you fail a couple times.. if I cat faillog it has some readable text, but still garbly unless you run strings on it...
Jim