LOGIN FAILED:
Apr 23 14:30:40 haz sudo: pam_unix(sudo:session): session opened for user root by dan(uid=0)
Apr 23 14:30:57 haz gdm-password]: pam_unix(gdm-password:auth): authentication failure; logname= uid=0 euid=0 tty=/dev/tty1 ruser= rhost= user=dan
LOGIN SUCCEEDED ON SECOND ATTEMPT:
Apr 23 14:31:23 haz gdm-password]: pam_unix(gdm-password:session): session opened for user dan by (uid=0)
Apr 23 14:31:23 haz systemd-logind[725]: New session 8 of user dan.
EXAMPLE 1
/var/log/auth.log
LOGIN FAILED: sudo:session) : session opened for user root by dan(uid=0) gdm-password: auth): authentication failure; logname= uid=0 euid=0 tty=/dev/tty1 ruser= rhost= user=dan
Apr 23 14:30:40 haz sudo: pam_unix(
Apr 23 14:30:57 haz gdm-password]: pam_unix(
LOGIN SUCCEEDED ON SECOND ATTEMPT: gdm-password: session) : session opened for user dan by (uid=0) logind[ 725]: New session 8 of user dan.
Apr 23 14:31:23 haz gdm-password]: pam_unix(
Apr 23 14:31:23 haz systemd-