So I was wondering if anyone had seen this.  I have a set of nodes that when we setup auditd on them the events we get back list the auid as unset for basically everything except for login which shows up correctly.  Does anyone know where I may need to look at the config, something in PAM or else where?

_______________________________

Todd Harris

Progeny Systems

Office Number: 703-368-6107 ext517