https://www.youtube.com/watch?v=EO-IdF25118

It provides log management

Step1. Rsyslog verify and configure

Add below line
cd /etc/rsyslog.d
echo "*.debug   /var/log/debug.log" >> /etc/rsyslog.d/debug.conf

Step2. Restart rsyslog service

systemctl restart rsyslog.service

Step3. Take the backup of original file /etc/pam.d/system-auth-ac

cp -vf /etc/pam.d/system-auth-ac /etc/pam.d/system-auth-ac_bkp

Step4. Original file configuration

cat /etc/pam.d/system-auth-ac | grep debug
 
auth        required      pam_env.so
auth        required      pam_faildelay.so delay=2000000
auth        sufficient    pam_fprintd.so
auth        sufficient    pam_unix.so nullok try_first_pass
auth        requisite     pam_succeed_if.so uid >= 1000 quiet_success
auth        required      pam_deny.so

 -------------------------- After add debug module -------------------------- 
cat /etc/pam.d/system-auth-ac | grep debug
 
auth        required      pam_env.so debug 
auth        required      pam_faildelay.so delay=2000000 debug
auth        sufficient    pam_fprintd.so
auth        sufficient    pam_unix.so nullok try_first_pass debug
auth        requisite     pam_succeed_if.so uid >= 1000 quiet_success debug
auth        required      pam_deny.so debug

Step5. Check log in debug file.

tail -f /var/log/debug.log

For Live Installation you may refer below youtube link:-

https://www.youtube.com/watch?v=EO-IdF25118

LEAVE A REPLY

Please enter your comment!
Please enter your name here