how to log all the fail logins

[Cody Wang <cwang@xxxxxxxxxxxxxxx>]

Hi,

How could i setup event log to see all the fail login users? The
current setup is, but I don't see any activity.

kern.debug              /var/adm/syslog.dated/kern.log                 
        
user.debug              /var/adm/syslog.dated/user.log                 
        
mail.debug              /var/adm/syslog.dated/mail.log                 
        
daemon.debug            /var/adm/syslog.dated/daemon.log               
        
auth.debug              /var/adm/syslog.dated/auth.log                 
        
auth.crit;syslog.debug          /var/adm/syslog.dated/syslog.log       
        
mail,lpr.debug          /var/adm/syslog.dated/misc.log                 
        
lpr.err                 /var/adm/syslog.dated/lpr.log  

0 -rw-r-----   1 root     adm            0 Jun  2 13:58 auth.log       
        
0 -rw-r-----   1 root     adm            0 Jun  2 13:58 daemon.log     
        
0 -rw-r-----   1 root     adm            0 Jun  2 13:58 kern.log       
        
0 -rw-r-----   1 root     adm            0 Jun  2 13:58 lpr.log        
        
0 -rw-r-----   1 root     adm            0 Jun  2 13:58 mail.log       
        
1 -rw-r-----   1 root     adm           95 Jun  2 14:00 syslog.log 


Best Regards, 
Cody Wang

Database Programmer Analyst 
Berkshire Community College
1350 West Street
Pittsfield, MA 01201
413-499-4660 x497