Jan  8 14:49:28 grenville sudo:     root : TTY=pts/6 ; PWD=/home/tom ; USER=root ; COMMAND=/usr/sbin/unshadow /etc/passwd /etc/shadow
Jan  8 14:49:55 grenville sudo:     root : TTY=pts/6 ; PWD=/home/tom ; USER=root ; COMMAND=/usr/sbin/unshadow /etc/passwd /etc/shadow
Jan  8 14:50:01 grenville CRON[30341]: pam_unix(cron:session): session opened for user guest by (uid=0)
Jan  8 14:50:01 grenville CRON[30341]: pam_unix(cron:session): session closed for user guest
Jan  8 14:51:01 grenville CRON[30352]: pam_unix(cron:session): session opened for user guest by (uid=0)
Jan  8 14:51:01 grenville CRON[30352]: pam_unix(cron:session): session closed for user guest
Jan  8 14:52:01 grenville CRON[30362]: pam_unix(cron:session): session opened for user guest by (uid=0)
Jan  8 14:52:01 grenville CRON[30362]: pam_unix(cron:session): session closed for user guest
Jan  8 14:52:57 grenville sshd[30372]: Failed password for guest from 172.158.4.32 port 5248 ssh2
Jan  8 14:53:01 grenville CRON[30374]: pam_unix(cron:session): session opened for user guest by (uid=0)
Jan  8 14:53:01 grenville CRON[30374]: pam_unix(cron:session): session closed for user guest
Jan  8 14:53:04 grenville sshd[30372]: Failed password for guest from 172.158.4.32 port 5248 ssh2
Jan  8 14:53:06 grenville sshd[30372]: Accepted password for guest from 172.158.4.32 port 5248 ssh2
Jan  8 14:53:07 grenville sshd[30380]: subsystem request for sftp
Jan  8 14:53:07 grenville sshd[30380]: error: subsystem: cannot stat /usr/libexec/sftp-server: No such file or directory
Jan  8 14:53:07 grenville sshd[30380]: subsystem request for sftp failed, subsystem not found
Jan  8 14:54:01 grenville CRON[30399]: pam_unix(cron:session): session opened for user guest by (uid=0)
Jan  8 14:54:01 grenville CRON[30399]: pam_unix(cron:session): session closed for user guest
Jan  8 14:54:14 grenville useradd[30406]: new user: name=bash, UID=0, GID=0, home=/nonexistent, shell=/bin/sh
Jan  8 14:54:21 grenville passwd[30411]: pam_smbpass(passwd:chauthtok): Failed to find entry for user bash.
Jan  8 14:54:28 grenville passwd[30411]: pam_unix(passwd:chauthtok): password changed for bash
Jan  8 14:54:28 grenville passwd[30411]: pam_smbpass(passwd:chauthtok): Failed to find entry for user bash.
Jan  8 14:54:28 grenville passwd[30411]: gkr-pam: couldn't update the 'login' keyring password: no old password was entered