Perhaps the /var/adm/loginlog would help you? (man loginlog)
> is there a command to get the lists of users unsuccessful login or bad
> attempts. all i can see from /var/adm are successful attempts. is this
> possible?
Best regards,
//Magnus Abrante
/* This is not the opinion of my company, its just my own */