Describes formats for user and accounting information.
The utmp file, the wtmp file, and the failedlogin file contain records with user and accounting information.
When a user attempts to logs in, the login program writes entries in two files:
On an invalid login attempt, due to an incorrect login name or password, the login program makes an entry in:
The records in these files follow the utmp format, defined in the utmp.h header file.
| /etc/utmp | Contains a record of users logged into the system. |
| /var/adm/wtmp | Contains connect accounting information. |
| /etc/security/failedlogin | Contains a record of invalid login attempts. |
The fwtmp command, init command, login command, su command, who command.
The utmp.h file, lastlog file format.
Accounting Commands in AIX 5L Version 5.2 System Management Concepts: Operating System and Devices lists accounting commands that run automatically or keyboard commands entered from the keyboard.
Accounting Overview in AIX 5L Version 5.2 System Management Concepts: Operating System and Devices and Setting Up an Accounting System in AIX 5L Version 5.2 System Management Guide: Operating System and Devices.