MAN page from RedHat 6.X shadow-utils-980403-12.i386.rpm

FAILLOG

Section: Maintenance Commands (8)
Index

NAME

faillog - examine faillog and set login failure limits

SYNOPSIS

faillog: [-uuid][-a][-tdays][-mmax][-pr]

DESCRIPTION

faillog formats the contents of the failure log,/usr/adm/faillog, and maintains failure counts andlimits.The order of the arguments to faillog is significant.Each argument is processed immediately in the order given.

The -p flag causes failure entries to be printed in UIDorder.Entering -u login-name flag willcause the failure record for login-name only to be printed.Entering -t days will cause only thefailures more recent than days to be printed.The -t flag overrides the use of -u.The -a flag causes all users to be selected.When used with the -p flag, this option selects all userswho have ever had a login failure.It is meaningless with the -r flag.

The -r flag is used to reset the count of login failures.Write access to /usr/adm/faillog is required forthis option.Entering -u login-name will cause only the failure countfor Blogin-name to be reset.

The -m flag is used to set the maximum number of loginfailures before the account is disabled.Write access to /usr/adm/faillog is required for thisoption.Entering -m max will cause all accounts to be disabledafter max failed logins occur.This may be modified with -u login-name to limit thisfunction to login-name only.Selecting a max value of 0 has the effect of not placinga limit on the number of failed logins.The maximum failure countshould always be 0 for root to preventa denial of services attack against the system.

Options may be combined in virtually any fashion.Each -p, -r, and -m option will causeimmediate execution using any -u or -t modifier.

CAVEATS

faillog only prints out users with no successful login sincethe last failure.To print out a user who has had a successful login since their lastfailure, you must explicitly request the user with the -u flag,or print out all users with the -a flag.

Some systems may replace /usr/adm with /var/adm or /var/log.

FILES

/usr/adm/faillog - failure logging file

AUTHOR

Julianne Frances Haugh (jfhAATTtab.com)

This document was created byman2html,using the manual pages.