by Hi,
I left the computer on with the screen locked under kde.
Later, I discovered the following by looking at /var/log/messages:
Dec 7 19:12:04 Nancy kde(pam_unix)[3443]: authentication failure; logname= uid=500 euid=0 tty=:0 ruser= rhost= user=gt
Dec 7 19:12:06 Nancy kde(pam_unix)[3444]: authentication failure; logname= uid=500 euid=0 tty=:0 ruser= rhost= user=gt
Dec 7 19:12:09 Nancy kde(pam_unix)[3445]: authentication failure; logname= uid=500 euid=0 tty=:0 ruser= rhost= user=gt
Dec 7 19:12:11 Nancy kde(pam_unix)[3446]: authentication failure; logname= uid=500 euid=0 tty=:0 ruser= rhost= user=gt
Dec 7 19:12:14 Nancy kde(pam_unix)[3447]: authentication failure; logname= uid=500 euid=0 tty=:0 ruser= rhost= user=gt
Dec 7 19:12:16 Nancy kde(pam_unix)[3448]: authentication failure; logname= uid=500 euid=0 tty=:0 ruser= rhost= user=gt
Dec 7 19:12:19 Nancy kde(pam_unix)[3449]: authentication failure; logname= uid=500 euid=0 tty=:0 ruser= rhost= user=gt
Dec 7 19:13:17 Nancy kde(pam_unix)[3450]: authentication failure; logname= uid=500 euid=0 tty=:0 ruser= rhost= user=gt
At that day / time I wasn't at work !! I did a test by unlocking the screen by entering a wrong password and I got:
Dec 11 08:43:55 Nancy kde(pam_unix)[7095]: authentication failure; logname= uid=500 euid=0 tty=:0 ruser= rhost= user=gt
Dec 11 08:43:58 Nancy kcheckpass[7095]: authentication failure for user gt [uid 500]
Why the line with kcheckpass is not present in the log of Dec 7 ?? Did someone try to unlock the computer by using the keyboard ?
Please help,
Giuseppe