On Thursday 06 December 2007 02:42:30 pm Kirkwood, David A. wrote: > The ausearch -m DAEMON_START returns version 1.0.14 for auditd on both > systems. I grepped for loginuid.so in the pam.d directory and it appears in > all of the same pam entries on both systems. No luck yet, however I > appreciate your help. Do you have audit=1 as kernel boot option? -Steve