shadow/man/faillog.8

.\" ** You probably do not want to edit this file directly **
.\" It was generated using the DocBook XSL Stylesheets (version 1.69.1).
.\" Instead of manually editing it, you probably should edit the DocBook XML
.\" source for it and then use the DocBook XSL Stylesheets to regenerate it.
.TH "FAILLOG" "8" "11/05/2005" "System Management Commands" "System Management Commands"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
.SH "NAME"
faillog \- display faillog records or set login failure limits
.SH "SYNOPSIS"
.HP 8
\fBfaillog\fR [\fIoptions\fR]
.SH "DESCRIPTION"
.PP
\fBfaillog\fR
formats the contents of the failure log from
\fI/var/log/faillog\fR
database. It also can be used for maintains failure counters and limits. Run
\fBfaillog\fR
without arguments display only list of user faillog records who have ever had a login failure.
.SH "OPTIONS"
.PP
The options which apply to the
\fBfaillog\fR
command are:
.TP
\fB\-a\fR, \fB\-\-all\fR
Display faillog records for all users.
.TP
\fB\-h\fR, \fB\-\-help\fR
Display help message and exit.
.TP
\fB\-l\fR, \fB\-\-lock\-time\fR \fISEC\fR
Lock account to
\fISEC\fR
seconds after failed login.
.TP
\fB\-m\fR, \fB\-\-maximum\fR \fIMAX\fR
Set maximum number of login failures after the account is disabled to
\fIMAX\fR. Selecting
\fIMAX\fR
value of 0 has the effect of not placing a limit on the number of failed logins. The maximum failure count should always be 0 for
\fIroot\fR
to prevent a denial of services attack against the system.
.TP
\fB\-r\fR, \fB\-\-reset\fR
Reset the counters of login failures or one record if used with the \-u
\fILOGIN\fR
option. Write access to
\fI/var/log/faillog\fR
is required for this option.
.TP
\fB\-t\fR, \fB\-\-time\fR \fIDAYS\fR
Display faillog records more recent than
\fIDAYS\fR. The
\fB\-t\fR
flag overrides the use of
\fB\-u\fR.
.TP
\fB\-u\fR, \fB\-\-user\fR \fILOGIN\fR
Display faillog record or maintains failure counters and limits (if used with
\fB\-l\fR,
\fB\-m\fR
or
\fB\-r\fR
options) only for user with
\fILOGIN\fR.
.SH "CAVEATS"
.PP
\fBfaillog\fR
only prints out users with no successful login since the last failure. To print out a user who has had a successful login since their last failure, you must explicitly request the user with the
\fB\-u\fR
flag, or print out all users with the
\fB\-a\fR
flag.
.SH "FILES"
.TP
\fI/var/log/faillog\fR
failure logging file
.SH "SEE ALSO"
.PP
\fBlogin\fR(1),
\fBfaillog\fR(5).