[Touch-packages] [Bug 2084854] Re: last and lastb missing in 24.10

2025-02-10 Thread Andrew Bower
The bad news is that even utmpdump is dumped from the next release. In mitigation, there will be fewer things writing to the utmp-formatted logs and lastb would probably be more or less useless for that reason now, but that still leaves no solution for interrogating old logs. https://launchpad.net

[Touch-packages] [Bug 2084854] Re: last and lastb missing in 24.10

2025-02-12 Thread Andrew Bower
I have created a 'wishlist' bug in the Debian BTS to reinstate these tools in an optional package: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1095490 But this will _not_ solve the question of tracking failed logins because they are not likely to get stored in the old files in future, so

[Touch-packages] [Bug 2084854] Re: last and lastb missing in 24.10

2025-02-12 Thread Andrew Bower
Hi Gordon, > Happy to do that if they exist, but I haven't found such a log. Bear with me because I'm not currently an Ubuntu user and don't use systemd on most systems, but there must surely be an easy way with journalctl? Hopefully a developer will answer on your above question! What should wo

[Touch-packages] [Bug 2084854] Re: last and lastb missing in 24.10

2025-02-12 Thread Andrew Bower
> And it does also log failed local attempts (although it seems to log all unknown accounts as UNKNOWN, rather than what was actually tried). I always assumed this was to protect users when they accidentally type their password as username! We've all done that... right? I wouldn't be surprised i