Hi Mike,
I just made that change to one of my users and it is listed in auth.log which can be found in /var/log/. It looks like this;
Code:
Nov 28 08:05:28 OxfordComma polkitd(authority=local): Operator of unix-session:c2 successfully authenticated as unix-user:urock to gain TEMPORARY authorization for action org.freedesktop.systemtoolsbackends.set for system-bus-name::1.128 [users-admin] (owned by unix-user:urock)
Nov 28 08:05:36 OxfordComma chpasswd[5391]: pam_unix(chpasswd:chauthtok): new password not acceptable
Nov 28 08:05:36 OxfordComma gpasswd[5393]: user urock2 added by root to group nopasswdlogin
I am looking to see if any other logs give more information. This shows which user was authenticated to make the change.
Bookmarks