[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Mail to administrator



hey any one tried this

Say some unauthorised user tries to access a service.

We get a message in log file saying  authentication failure.

Anyone know how to send a mail through pam to the administrator saying
an unauthorised user tried to  access a service.

Let me give you an example.

If some one tries to ssh 192.168.1.66

and enters password wrong

the following message will be displayed in log saying

sshd authentication failure user=XXX tty=*** ipaddress=192.168.1.44

something like this..

Is it possible to send a mail to administrator with the same message in
the mail when ever there is an authentication failure.










[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index] []