Where is login failure information kept on CentOS? /var/log/faillog is present and non zero, but faillog -a does not show any failures. Lee -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.