I use Ubuntu 11.10. And I want it to write logging messages about failed ssh log in attempts to
/var/log/auth.log. In my understanding
/var/log/auth.log is supposed to hold all failed ssh connection attempts.
How am I supposed to do? (What do I need to check? How can I configure my machine?)
:~$ sudo ls -al /var/log/auth.log -rw-r----- 1 syslog adm 0 2011-09-11 06:25 /var/log/auth.log :~$ sudo ls -al /var/log/wtmp -rw-rw-r-- 1 root utmp 15744 2013-03-21 18:09 /var/log/wtmp
/var/log/wtmp is handled very well as you could find it above. But /var/log/auth.log is EMPTY. I'd like my machine handle
/var/log/auth.log as it is supposed to be.
Thank you in advance.