Check that at least access and error logging is enabled.
Log in using a nonexistent username, and check the information this generates in the log file.
Log in using an existing username, but a wrong password, and check the log files.