Bolou
1
hello,
i just want to know logs files for these actions listed below :
- User Account Creation
- User Account Deletion
- Failed and or Successful User Password Changes
- Failed Login Activities for all User Users
- System Reboot or and shutdown
help appreciated...
1 Like
User login and password change is logged by PAM, loglevel is info.debug
.
It matches the line
*.info;mail.none /var/adm/syslog/syslog.log
in /etc/syslog.conf
Also events with higher priority, for example a system reboot, match the *.info
so goes to the log file /var/adm/syslog/syslog.log