The following configuration is
given for recording the log based on authentication
(telnet).
Step : 1
Make a backup file of the
original /etc/syslog.conf
# cp /etc/syslog.conf
/etc/syslog.conf.org
Step : 2
Edit the /etc/syslog.conf and add
the facility.level as "auth.notice"
.err;kern.debug;daemon.notice;mail.crit;auth.notice
/var/adm/message
Step : 3
Edit the /etc/init.d/inetsvc file
and change the line for inetd command as below ( last line
)
/usr/sbin/inetd -s -t
&
Step : 4
Restart the Syslogd
Process
# /etc/init.d/syslog
stop
# /etc/init.d/syslog start
Step : 5
Restart the inetd
Process
# /etc/init.d/inetsvc stop
# /etc/init.d/inetsvc start
Step : 6
To view the Log message in
the running mode
# tail -f
/var/adm/message
Step : 7
To check the Log message is
recoding , go to another terminal use telnet to connect
to this host
# telnet
host1
Step : 8
Note down the Syslog Message
updates in /var/adm/message