RE: Monitoring the change of password in Unix

["Jason Mitchell" <jm () hcn com au>]

pam has the ability to do so, and does so by default on most linux boxes.
What version of Unix are you talking about specifically? 

The following is from /var/log/secure on a RHEL box:

Jan 22 08:23:49 www passwd: pam_unix(passwd:chauthtok): password changed for
jm

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of wilson () email chop edu
Sent: Wednesday, 21 January 2009 3:03 PM
To: security-basics () securityfocus com
Subject: Monitoring the change of password in Unix

Is there a way in Unix, without extra software, to monitor the use of the
"passwrd" command to reset the password?  Perferably something that sent the
event to Syslog.