Pardon me for my newness but what should be the permisssions on /var/log/faillog for the pam_tally module? we have a number of instances of the following error showing up: greenash pam_tally[2520]: Error opening /var/log/faillog for update -Russ Johns