On Friday, December 17, 2010 01:48:42 pm Ashok Kumar J wrote: Login uid is the original id that a user logs in with. However, that is not as concise as it could be. So, in the logs its represented as auid to save bytes because it will show up in all events. They are synonymous. There is no setauid function. There is a audit_setloginuid() function that you could write a short program to see what it does. It creates a LOGIN event - which is really to indicate that a loginuid was assigned. -Steve