From owner-freebsd-security  Tue Oct  7 14:17:07 1997
Return-Path: <owner-freebsd-security>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id OAA23519
          for security-outgoing; Tue, 7 Oct 1997 14:17:07 -0700 (PDT)
          (envelope-from owner-freebsd-security)
Received: from pericles.aipo.gov.au (pericles.aipo.gov.au [202.14.186.30])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id OAA23512
          for <security@freebsd.org>; Tue, 7 Oct 1997 14:17:03 -0700 (PDT)
          (envelope-from Stanley.Hopcroft@aipo.gov.au)
From: Stanley.Hopcroft@aipo.gov.au
Received: (from smap@localhost) by pericles.aipo.gov.au (8.8.5/8.6.12) id HAA01546 for <security@freebsd.org>; Wed, 8 Oct 1997 07:14:19 +1000 (EST)
X-Authentication-Warning: pericles.aipo.gov.au: smap set sender to <Stanley.Hopcroft@aipo.gov.au> using -f
Received: from notes.aipo.gov.au(192.3.1.11) by pericles.aipo.gov.au via smap (V1.3)
	id sma001544; Wed Oct  8 07:13:59 1997
Received: by notes.aipo.gov.au(Lotus SMTP MTA v1.05b4 (287.3 12-16-1996))  id 4A256529.0074C0D9 ; Wed, 8 Oct 1997 07:15:15 +1000
X-Lotus-FromDomain: INTERNET
To: security@freebsd.org
Message-ID: <4A256529.0074BF72.00@notes.aipo.gov.au>
Date: Wed, 8 Oct 1997 06:30:08 +1000
Subject: How do I  get warned about unsuccessful root login attemtps 
Mime-Version: 1.0
Content-type: text/plain; charset=US-ASCII
Sender: owner-freebsd-security@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk







     Dear Ladies and Gentlemen,

     I am writing to ask how FreeBSD may alert me to unsuccessfull root
     login attempts (as distinct from a successfull login) ?

     One possibility is replacing getpasswd by a locally produced one that
     writes all attempst to the syslog facility, however I don't really
     want to do that even with the source available.

     Any suggestions will be gratefully received.

     Thank you.

     Yours sincerely,

     S Hopcroft
     AIPO (better known by its former name of Patents Trade Marks & Designs
     Offices)