- So in this lab,
you need to find a file where errors are written to.
Well, if it's a file, then it's rsyslog.
If it's rsyslog,
then you should start with rsyslog.conf
Where we can see,
there we go.
Authpriv.
Authpriv is the authentication related priority.
And the authentication related priority
is writing all messages to var/log/secure
So you know what? We found it.
var/log/secure.
Authpriv. That's the priority that you should be looking at.
And if you use less /var/log/secure,
what is in there?
Well, stuff like this.
Security related, authentication related events
You will see a lot of pam messages as well.
Pam is for plugable authentication modules.
That's a system behind authentication in a Linux system
and that's all that I expected you to do for this lab.