What about using the shell history? That should tell you what commands you executed.
> -----Original Message----- > From: Stone, Timothy [mailto:[EMAIL PROTECTED] > Sent: Tuesday, April 01, 2003 8:41 AM > To: [EMAIL PROTECTED] > Subject: RE: Accidently deleted user--help > > > > > > Check /var/log/secure, your actions should have been logged there. > > > > Nothing but recent "sudo" actions. :( *Nothing* of my recent > work in Users and Groups is logged there (when working as the > authenticated root user). In a simple bid to secure the > passwords of a number of users installed for various > programs, i.e. user:mrtg password:mrtg, I changed many to a > highly cryptic "offensive nonsense" phase 11 characters in > length. These actions are *not* appearing in /var/log/secure > > Thanks for that suggestion however! :) -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list