On 27/05/11 12:30, Paul Littlefield wrote: > Have a look in /var/log/auth.log and tell me what's there. You could then start with... $ grep 'session opened for user xxxx' /var/log/auth.log ...and decide on whether you want numbers, dates, or whatever. I can write something today or tomorrow at the KLUG meet. Paully