Page 1 of 2 12 LastLast
Results 1 to 10 of 11

Thread: Can I see the usernames and passwords that failed to login on my PC?

  1. #1
    Join Date
    Feb 2008
    Location
    Munster, Ireland
    Beans
    2,467
    Distro
    Ubuntu Mate

    Question Can I see the usernames and passwords that failed to login on my PC?

    Hi.

    Example scenario. At my login screen it does not show the possible username(s) to pick from. If someone tried to login as Zac with the password Tulip -- could I find that out? Or at least the failed login usernames anyway?
    1st Distro used (live CD): Knoppix in early 2007 ¦ 1st Distro Installed: Ubuntu 7.10 in Feb 2008
    GNU/Linux User #470660 – Ubuntu User #28226
    Isaac Asimov: "I do not fear computers. I fear the lack of them."

  2. #2
    Join Date
    Feb 2011
    Location
    Somewhere...
    Beans
    1,554
    Distro
    Ubuntu 14.10 Utopic Unicorn

    Re: Can I see the usernames and passwords that failed to login on my PC?

    I don't know if it shows passwords of failed logins (haven't tried it), but /var/log/lightdm/lightdm.log logs everything related to logins. You need to be root to view it though.

  3. #3
    Join Date
    Feb 2008
    Location
    Munster, Ireland
    Beans
    2,467
    Distro
    Ubuntu Mate

    Exclamation Re: Can I see the usernames and passwords that failed to login on my PC?

    Quote Originally Posted by zombifier25 View Post
    I don't know if it shows passwords of failed logins (haven't tried it), but /var/log/lightdm/lightdm.log logs everything related to logins. You need to be root to view it though.
    That file is blank.
    1st Distro used (live CD): Knoppix in early 2007 ¦ 1st Distro Installed: Ubuntu 7.10 in Feb 2008
    GNU/Linux User #470660 – Ubuntu User #28226
    Isaac Asimov: "I do not fear computers. I fear the lack of them."

  4. #4
    Join Date
    Feb 2011
    Location
    Somewhere...
    Beans
    1,554
    Distro
    Ubuntu 14.10 Utopic Unicorn

    Re: Can I see the usernames and passwords that failed to login on my PC?

    Are you using LightDM?

  5. #5
    Join Date
    Feb 2008
    Location
    Munster, Ireland
    Beans
    2,467
    Distro
    Ubuntu Mate

    Question Re: Can I see the usernames and passwords that failed to login on my PC?

    Quote Originally Posted by zombifier25 View Post
    Are you using LightDM?
    I apologise. You were correct. I tried that command from LM MATE on my desktop. It works fine on my laptop (Xubuntu).

    Code:
    sudo leafpad /var/log/lightdm/lightdm.log
    How would I do the same in MATE? Probably somewhere like /var/log/mdm but am not certain.
    Last edited by Rytron; June 18th, 2012 at 12:01 PM.
    1st Distro used (live CD): Knoppix in early 2007 ¦ 1st Distro Installed: Ubuntu 7.10 in Feb 2008
    GNU/Linux User #470660 – Ubuntu User #28226
    Isaac Asimov: "I do not fear computers. I fear the lack of them."

  6. #6
    Join Date
    Apr 2008
    Location
    LOCATION=/dev/random
    Beans
    5,767
    Distro
    Ubuntu Development Release

    Re: Can I see the usernames and passwords that failed to login on my PC?

    How about /var/log/auth.log ?
    Cheesemill

  7. #7
    Join Date
    Jan 2010
    Location
    Lillehammer, Norway
    Beans
    23
    Distro
    Kubuntu 9.10 Karmic Koala

    Re: Can I see the usernames and passwords that failed to login on my PC?

    You could try the command 'lastb'. You probably must be root on ubuntu, because of the access-rights of the /var/log/btmp. (However I see my system is not logging to this as it should.)

    Another file you can look at is /var/log/auth.log . Agian you must be root, and you may have to activate it by uncommenting the lines in /etc/rsyslog or /etc/rsyslog.d/50-default.conf, and touching /var/log/auth.log . Just look at the auth-log file with less or use grep.

    Both will show you which users have tried to log-in with invalid passwords and if unknown users have tried to log-in. You should also see when and from where. Neither let you see the actual password used though.

  8. #8
    Join Date
    Feb 2008
    Location
    Munster, Ireland
    Beans
    2,467
    Distro
    Ubuntu Mate

    Wink Re: Can I see the usernames and passwords that failed to login on my PC?

    Quote Originally Posted by Cheesemill View Post
    How about /var/log/auth.log ?
    Works fine in Xubuntu 12.04.
    1st Distro used (live CD): Knoppix in early 2007 ¦ 1st Distro Installed: Ubuntu 7.10 in Feb 2008
    GNU/Linux User #470660 – Ubuntu User #28226
    Isaac Asimov: "I do not fear computers. I fear the lack of them."

  9. #9
    Join Date
    Feb 2008
    Location
    Munster, Ireland
    Beans
    2,467
    Distro
    Ubuntu Mate

    Question Re: Can I see the usernames and passwords that failed to login on my PC?

    Quote Originally Posted by bokopperud View Post
    You could try the command 'lastb'. You probably must be root on ubuntu, because of the access-rights of the /var/log/btmp. (However I see my system is not logging to this as it should.)

    Another file you can look at is /var/log/auth.log . Agian you must be root, and you may have to activate it by uncommenting the lines in /etc/rsyslog or /etc/rsyslog.d/50-default.conf, and touching /var/log/auth.log . Just look at the auth-log file with less or use grep.

    Both will show you which users have tried to log-in with invalid passwords and if unknown users have tried to log-in. You should also see when and from where. Neither let you see the actual password used though.
    What lines do I uncomment?
    1st Distro used (live CD): Knoppix in early 2007 ¦ 1st Distro Installed: Ubuntu 7.10 in Feb 2008
    GNU/Linux User #470660 – Ubuntu User #28226
    Isaac Asimov: "I do not fear computers. I fear the lack of them."

  10. #10
    Join Date
    Apr 2008
    Location
    LOCATION=/dev/random
    Beans
    5,767
    Distro
    Ubuntu Development Release

    Re: Can I see the usernames and passwords that failed to login on my PC?

    Quote Originally Posted by Rytron View Post
    What lines do I uncomment?
    If /var/log/auth.log already has entries in it then you don't need to uncomment anything, it's already working.
    Cheesemill

Page 1 of 2 12 LastLast

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •