On Wed, Oct 25, 2023 at 03:27:52PM +0200, Johannes Thyssen Tishman wrote:
> Hi,
>
> I was just logging into my system through xenodm and for some reason
> I typed my password into the username field... whoops :/ Luckily I
> was at home and no one was around. However I'd like to know if these
> login attempts are logged somewhere such that someone who knew what
> I just did, could look for my "username" somewhere in a log file.
>
Yes,
The attempt is logged in /var/log/secure:
Oct 25 21:25:39 <my hostname> xenodm[25333]: LOGIN FAILURE ON :0, <bum username>
Controlled by this entry in /etc/syslog.conf:
authpriv.debug /var/log/secure
Regards
-Ampie
> For example xlock attempts seem to be logged in /var/log/auth with
> the username. Is there something like this for xenodm? I couldn't
> find anything in /var/log/{xendom,Xorg.0.log}.
>
> Thanks.
>
> Kind regards,
> Johannes
>
