Ask Your Question
0

Where is the PAM log file located on Fedora 20?

asked 2014-09-18 22:58:13 -0500

updated 2014-09-19 01:35:09 -0500

I need to setup fail2ban on my systems, and I can't get the jail [pam-generic] setup. I can't find the log file for PAM, that is failed login attempts, I don't quite understand what PAM is yet but it seems important.

So where is the "pam log file" that I need in my fail2ban setup?

I have found this but it doesn't describe precisely what the log file is, just comes with a sort of suggestion. Is that the correct log file: /var/log/secure ?

EDIT:

This would suggest it's the rigth log file:

Status for the jail: pam-generic
|- Filter
|  |- Currently failed: 5
|  |- Total failed:     2670
|  `- File list:        /var/log/secure
`- Actions
   |- Currently banned: 37
   |- Total banned:     37
   `- Banned IP list:   77.221.144.184 122.225.109.105 122.225.109.106 122.225.109.100 1.93.24.72 222.186.21.53 122.225.109.209 122.225.109.208 122.225.109.207 122.225.109.220 122.225.109.205 122.225.109.222 122.225.109.203 122.225.109.201 122.225.103.125 218.2.0.129 113.247.227.28 183.60.111.82 222.216.28.212 61.174.51.223 122.70.133.245 61.174.51.202 61.152.188.159 61.174.51.206 122.225.109.112 61.174.51.196 61.174.51.197 122.225.109.199 122.225.109.197 122.225.109.196 122.225.109.216 113.106.88.235 122.225.109.212 219.138.135.64 122.225.109.195 61.174.51.198 222.186.52.3
edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2014-09-19 02:37:36 -0500

Rajat gravatar image

I have follow as:

Edit /etc/pam.d/system-auth file, enter: # vi /etc/pam.d/system-auth

auth required pam_tally.so no_magic_root account required pam_tally.so deny=3 no_magic_root lock_time=1

tailf /var/log/secure |grep -i Failed

you can give try on. kindly let me know

edit flag offensive delete link more

Comments

I can't edit that file, it says at the top:

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
somethingSomething gravatar imagesomethingSomething ( 2014-09-19 16:48:00 -0500 )edit

Question Tools

1 follower

Stats

Asked: 2014-09-18 22:58:13 -0500

Seen: 555 times

Last updated: Sep 19 '14