While reading about Linux, especially about sudo, I got:

A message such as the following would appear in a system log file (usually /var/log/secure) when trying to execute sudo bash without successfully authenticating the user:

authentication failure; logname=op uid=0 euid=0 tty=/dev/pts/6 ruser=op rhost= user=op conversation failed auth could not identify password for [op] op : 1 incorrect password attempt ; TTY=pts/6 ; PWD=/var/log ; USER=root ; COMMAND=/bin/bash 

Then I tried it in my shell prompt:

anupam@JAZZ:~$ sudo bash [sudo] password for anupam: root@JAZZ:~# 

then when I looked for /var/log/secure, it was not there

anupam@JAZZ:~$ more /var/log/secure /var/log/secure: No such file or directory anupam@JAZZ:~$ ls /var/log alternatives.log auth.log dmesg gpu-manager.log mysql.log pm-suspend.log.2.gz upstart alternatives.log.1 auth.log.1 dmesg.0 hp mysql.log.1.gz samba wtmp alternatives.log.2.gz auth.log.2.gz dmesg.1.gz installer mysql.log.2.gz speech-dispatcher wtmp.1 apache2 auth.log.3.gz dmesg.2.gz jetty mysql.log.3.gz syslog Xorg.0.log apport.log auth.log.4.gz dmesg.3.gz kern.log mysql.log.4.gz syslog.1 Xorg.0.log.old apport.log.1 boot.log dmesg.4.gz kern.log.1 mysql.log.5.gz syslog.2.gz Xorg.1.log apport.log.2.gz bootstrap.log dpkg.log kern.log.2.gz mysql.log.6.gz syslog.3.gz Xorg.1.log.old apport.log.3.gz btmp dpkg.log.1 kern.log.3.gz mysql.log.7.gz syslog.4.gz apport.log.4.gz btmp.1 dpkg.log.2.gz kern.log.4.gz pm-powersave.log syslog.5.gz apport.log.5.gz ConsoleKit faillog lastlog pm-powersave.log.1 syslog.6.gz apport.log.6.gz cups fontconfig.log lightdm pm-powersave.log.2.gz syslog.7.gz apport.log.7.gz dbconfig-common fsck mysql pm-suspend.log udev apt dist-upgrade gdm mysql.err pm-suspend.log.1 unattended-upgrades 

Is there any alternative for /var/log/secure in my system?

1 Answer

This type of log events is usually found in /var/log/auth.log in Debian and its derivatives including Ubuntu.

2

Your Answer

Sign up or log in

Sign up using Google Sign up using Facebook Sign up using Email and Password

Post as a guest

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy