System faillog not capturing ssh users

Issue

• If a user puts in a bad password at the console, it is not captured correctly.

• To see this run the following:

[root@~]$ faillog -u test
Login       Failures Maximum Latest                   
test            2        5   Tue Mar  1 11:13:41 -0600 2011  rbctsm01.sy

• But if a user tries to ssh into the box and puts in a bad password, it does not log correctly:

[root@~]$ faillog -u sshtest
Login       Failures Maximum Latest
sshtest         0        5   Wed Dec 31 18:00:00 -0600 1969