ServerWatch: "You can use an on online attack as an opportunity to check that your security systems detect when a server is being bombarded with unsuccessful login attempts, and that individual accounts lock after a small number of unsuccessful login attempts."
Good morning. For the last day or so I've been trying to trouble shoot my /etc/pam.d/system-auth file. I have new requirements to have the user accounts locked after 3 failed login attempts. I've been able to implement the changes but for some reason when I do a #passwd -S <username> the user does not show locked even though I can not login as the user.
First off, HAPPY FRIDAY TO ALL!
Now for my "problem": I have a ssh server running at my home.
I've setup a FTP server in IIS 7.5 on Windows Server 2008 R2 Standard and enabled Basic Authentication. I have a basic user ("Ropstah") on the server which is in the Users and Some Custom groups. I've allowed the Some Custom group read/write access on the FTP folder.
Now when I connect to the server using "Ropstah" I get the following error:
530 User cannot login
Why is this?
I have password protected my /www root using a .htaccess and .htpasswd file and now I was wondering if it is possible to login invalid authentication attempts.
For security,you may want to disable the user list at login screen so that no one can know how many users on this computer.Following command will disable the user list and make it like earlier Ubuntu version,need to type user-name and password to login.
First,open a terminal window from Applications->Accessories menu.
Then,execute following command:
I am using denyhosts on a server
so in a config file
/etc/denyhosts.conf
the following value is set
Quote:
DENY_THRESHOLD_INVALID = 3
which as per their configuration file says
Quote:
DENY_THRESHOLD_INVALID: block each host after the number of failed login
# attempts has exceeded this value.
I'm looking for a log file or any service to report the latest login attempts which have failed due to username/password miss match. Is there such utility available for CentOS? (built-in is preferred)
My second question, and more generally, I need a log file of penetration attempts to my server.
I am working on a server with Debian 5.2.2. Barely having any administrative knowledge with Linux, I think I screwed something up. I used apt-get update and apt-get upgrade to get everything up to date and then I downloaded and installed Apache, PHP, and MySQL. Those tools seem to work fine, but now I can't even login to the server EXCEPT via local console.
Email this page
