On 27/05/11 11:59, Colin McCarthy wrote: > I've looked in the /var/log/audit/audit.log* files and I can see my logon attempts but none of theirs Have a look in /var/log/auth.log and tell me what's there. Paully