PAM audit events

PAM audit events
Centrify Event Id Description Parameters

24100-Deprecated

PAM authentication granted

This event has been deprecated. Use Centrify Event Id 24102 introduced in release 2017.3 instead.

service: service

tty: tty

client: client

24101-Deprecated

PAM authentication denied

This event has been deprecated. Use Centrify Event Id 24103 introduced in release 2017.3 instead.

service: service

tty: tty

client: client

reason: error message

24102

PAM authentication granted

added in release 2017.3

service: service

tty: tty

client: client

MfaRequired: whether user was required to do MFA

EntityName: Entity Name

24103

PAM authentication denied

added in release 2017.3

service: service

tty: tty

client: client

reason: error message

MfaRequired: whether user was required to do MFA

EntityName: Entity Name

24200

PAM set credentials granted

service: service

tty: tty

client: client

24201

PAM set credentials denied

service: service

tty: tty

client: client

reason: error message

24300

PAM account management granted

service: service

tty: tty

client: client

24301

PAM account management denied

service: service

tty: tty

client: client

reason: error message

24400

PAM change password granted

service: service

tty: tty

client: client

24401

PAM change password denied

service: service

tty: tty

client: client

reason: error message

24500

PAM open session granted

service: service

tty: tty

client: client

24501

PAM open session denied

service: service

tty: tty

client: client

reason: error message

24600

PAM close session granted

service: service

tty: tty

client: client

24601

PAM close session denied

service: service

tty: tty

client: client

reason: error message

24700

The user logins to the system in rescue mode

added in release 18.11

service: service

tty: tty

client: client