Log invalid login attempts

[jbnlsd]

Is there a way to monitor invalid Active Directory login attempts on a client computer (10.4 and/or 10.5)? I’ve gone through the logs and can only find invalid attempts for local users. I can only find the valid attempts for AD users.

[jbnlsd]

I just found that by turning on the debug log set to USR1 I get an entry in the form of:
ADPlugin: Authentiction failed for user [email protected]

But that’s among hundreds of lines of useless debug logging.

Plus, it defaults to no debug logging on restart.

[jbnlsd]

I work for a K-8 school district and I’ve noticed students trying to log on as teachers. I want to put something in that will check for invalid login attempts and snap a photo using the camera on the iMacs and log the date, time, username, and computer. It’s just a little side project to work on when I have time – nothing anyone’s even asking for but I’m sure it would come in handy and probably show the teachers that they should use a good password.

I’ve got a command line tool called isightcapture for taking the picture and I can figure everything else out. Actually, someone has already created a utility that does this but it only works for local users which get reported to asl.log (AuthSight).

[Author]

Posts