From owner-freebsd-questions@FreeBSD.ORG Tue Feb 5 00:17:54 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 98E9E16A41B for ; Tue, 5 Feb 2008 00:17:54 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from mail-out4.apple.com (mail-out4.apple.com [17.254.13.23]) by mx1.freebsd.org (Postfix) with ESMTP id 86C7213C458 for ; Tue, 5 Feb 2008 00:17:54 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from relay14.apple.com (relay14.apple.com [17.128.113.52]) by mail-out4.apple.com (Postfix) with ESMTP id 732D621210AB; Mon, 4 Feb 2008 16:17:54 -0800 (PST) Received: from relay14.apple.com (unknown [127.0.0.1]) by relay14.apple.com (Symantec Mail Security) with ESMTP id 5E43628083; Mon, 4 Feb 2008 16:17:54 -0800 (PST) X-AuditID: 11807134-a68efbb0000008b9-2d-47a7ab32aa2b Received: from cswiger1.apple.com (cswiger1.apple.com [17.214.13.96]) by relay14.apple.com (Apple SCV relay) with ESMTP id 3C1EE2808E; Mon, 4 Feb 2008 16:17:54 -0800 (PST) Message-Id: <4E314437-2B3E-4FC1-9825-5E08DA278635@mac.com> From: Chuck Swiger To: Tuan Ho In-Reply-To: Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v915) Date: Mon, 4 Feb 2008 16:17:53 -0800 References: X-Mailer: Apple Mail (2.915) X-Brightmail-Tracker: AAAAAA== Cc: freebsd-questions@freebsd.org Subject: Re: Help on freeBSD 4.10 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Feb 2008 00:17:54 -0000 On Feb 4, 2008, at 2:31 PM, Tuan Ho wrote: > 1/ > As an administrator, how can i disable an account after three > consecutive unsuccessful login attempts? As root, you could run: chsh -s /usr/sbin/nologin _user_ > 2/ > How can I enable logged file to monitor successful and unsuccessful > logins and logouts? This should be enabled by default already; examine /var/log/auth.log.... -- -Chuck