You're right. journalctl does have the info. And it does also log failed local attempts (although it seems to log all unknown accounts as UNKNOWN, rather than what was actually tried).
>> Any suggestions or improvements are welcome. I use a Perl script to get all failures since the last time it was run (it keeps a timestamp) and send me an email. It runs every night. So I'll try a rewrite to using journalctl. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to util-linux in Ubuntu. https://bugs.launchpad.net/bugs/2084854 Title: last and lastb missing in 24.10 Status in util-linux package in Ubuntu: Confirmed Bug description: The last and lastb commands have disappeared from util-linux at 24.10! This is odd, as the binaries from 24.04 actually run on 24.10, so the data is clearly still being collected and in the same format. Ubuntu: 24.10 (Oracular Oriole). Package: util-linux Version: 2.40.2-1ubuntu1 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/util-linux/+bug/2084854/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
