That's certainly not how it should work Are you sure you are not using the audit option to pam_unix? Without that option I see:
Jun 3 13:59:06 cz login[4777]: (pam_unix) check pass; user unknown Jun 3 13:59:06 cz login[4777]: (pam_unix) authentication failure; logname=hartmans uid=0 euid=0 tty=pts/2 ruser= rhost= Jun 3 13:59:10 cz login[4777]: FAILED LOGIN (1) on `pts/2' FOR `UNKNOWN', User not known to the underlying authentication module Jun 3 13:59:11 cz login[4777]: (pam_unix) bad username [] (Note that logname=hartmans refers to the logname in the environment of login, *not* to the unknown user I tried to log in as.) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
