diff --git a/etc/Makefile b/etc/Makefile
index 3823a34864ee..0bea4650d150 100644
--- a/etc/Makefile
+++ b/etc/Makefile
@@ -130,6 +130,8 @@ distribution:
 	    ${DESTDIR}/etc/dumpdates
 	${INSTALL} -c -o nobody -g ${BINGRP} -m 644 /dev/null \
 	    ${DESTDIR}/var/db/locate.database
+	${INSTALL} -c -o ${BINOWN} -g ${BINGRP} -m 600 /dev/null \
+	    ${DESTDIR}/var/log/authentication.log
 	${INSTALL} -c -o ${BINOWN} -g ${BINGRP} -m 644 /dev/null \
 	    ${DESTDIR}/var/log/lpd-errs
 	${INSTALL} -c -o ${BINOWN} -g ${BINGRP} -m 640 /dev/null \
diff --git a/etc/newsyslog.conf b/etc/newsyslog.conf
index f743c58a475b..8c70e94ee3e9 100644
--- a/etc/newsyslog.conf
+++ b/etc/newsyslog.conf
@@ -10,6 +10,7 @@
 # logfilename          [owner:group]    mode count size when [ZJB] [/pid_file] [sig_num]
 /var/log/cron				600  3	   100	*     Z
 /var/log/amd.log			644  7	   100	*     Z
+/var/log/authentication.log		600  7     100  *     Z
 /var/log/kerberos.log			600  7	   100	*     Z
 /var/log/lpd-errs			644  7	   100	*     Z
 /var/log/maillog			640  7	   *	@T00  Z
diff --git a/etc/syslog.conf b/etc/syslog.conf
index 7a3e843441b7..0c33d9737471 100644
--- a/etc/syslog.conf
+++ b/etc/syslog.conf
@@ -7,7 +7,8 @@
 #	Consult the syslog.conf(5) manpage.
 *.err;kern.debug;auth.notice;mail.crit		/dev/console
 *.notice;kern.debug;lpr.info;mail.crit;news.err	/var/log/messages
-security.*;auth.info				/var/log/security
+security.*					/var/log/security
+auth.info;authpriv.info				/var/log/authentication.log
 mail.info					/var/log/maillog
 lpr.info					/var/log/lpd-errs
 cron.*						/var/log/cron