You must configure the registry to enable logging from LDAP.
To log events from SecureLogin LDAP authentication module:
Create a registry value at HKEY_LOCAL_MACHINE\Software\Novell\Login\Ldap
The following events are logged:
Event ID 1 Informational: NSL user login
Event ID 2 Informational: LDAP user password change
Event ID 3 Warning: Workstation unlocked by different User
Open the nslevtsvc.ini file in a text editor, and add the following section about the new information source:
[wmi]
event_source=LDAPAuth
The following events are logged:
Event ID 1 Informational: NSL user login
Event ID 2 Informational: LDAP user password change
Event ID 3 Warning: Workstation unlocked by different User