From owner-freebsd-questions@FreeBSD.ORG Sat Feb 5 23:36:56 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B9F5516A4CE for ; Sat, 5 Feb 2005 23:36:56 +0000 (GMT) Received: from dragoncrest.jasnetworks.net (dragoncrest.jasnetworks.net [69.51.151.143]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1A4EA43D1F for ; Sat, 5 Feb 2005 23:36:56 +0000 (GMT) (envelope-from steve.lake@raiden.net) Received: from v5k7y7.raiden.net (works.jasnetworks.net [192.168.0.3]) j160BTbd068984; Sat, 5 Feb 2005 19:11:29 -0500 (EST) (envelope-from steve.lake@raiden.net) Message-Id: <5.2.0.9.2.20050205184558.00a58cb0@192.168.0.25> X-Sender: megos@192.168.0.25 X-Mailer: QUALCOMM Windows Eudora Version 5.2.0.9 Date: Sat, 05 Feb 2005 18:47:02 -0500 To: Roland Smith From: Steve Lake In-Reply-To: <20050203173503.GD39390@slackbox.xs4all.nl> References: <5.2.0.9.2.20050203102839.00a37c70@192.168.0.25> <5.2.0.9.2.20050203102839.00a37c70@192.168.0.25> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed cc: freebsd-questions@freebsd.org Subject: Re: questions about extra logging X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Feb 2005 23:36:56 -0000 Sorry it took so long getting back to you. Actually, I looked in auth.log and it only shows failures for KDE logins, not successes. I'm looking to log successes too. Thanks. (please reply directly to me as I don't subscribe to this list. ^_^ At 06:35 PM 2/3/05 +0100, Roland Smith wrote: >On Thu, Feb 03, 2005 at 10:33:45AM -0500, Steve Lake wrote: > > > I'm curious of something. I think I've got a fellow co-worker who may > > be trying to break into my workstation and I need some help. > > > I know kde logs whenever a failed login attempt occurs if the screen > > is locked and sends that in the daily logs, but it doesn't log > > successes. IE successfully loging into KDE via the password box when > > the screensaver/blank screen is running. I'd like to log ALL > > attempts, success, failure or otherwise, and have that included in my > > daily log reports so that I know if they did in fact get in at any one > > point when I wasn't there. > >The logfile /var/log/auth.log does contain _all_ logins, AFAIK. > >Roland >-- >R.F. Smith /"\ ASCII Ribbon Campaign >r s m i t h @ x s 4 a l l . n l \ / No HTML/RTF in e-mail >http://www.xs4all.nl/~rsmith/ X No Word docs in e-mail >public key: http://www.keyserver.net / \ Respect for open standards