<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <HTML> <HEAD> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=US-ASCII"> <META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7654.12"> <TITLE>user showing up as unset</TITLE> </HEAD> <BODY>  <P DIR=LTR><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Arial">So I was wondering if anyone had seen this. I have a set of nodes that when we setup auditd on them the events we get back list the auid as unset for</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Arial">basically</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Arial"></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Arial">everything except for login which shows up correctly. Does anyon</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Arial">e know where I may need to look at the config, something in PAM or else where?</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P> <P DIR=LTR><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><A NAME=""><SPAN LANG="en-us"><FONT SIZE=2 FACE="Arial">_______________________________</FONT></SPAN></A></P> <P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Arial">Todd Harris</FONT></SPAN></P> <P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Arial">Progeny Systems</FONT></SPAN></P> <P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Arial">Office Number: 703-368-6107 ext517</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P> <P DIR=LTR><SPAN LANG="en-us"></SPAN></P> </BODY> </HTML>