I have setup auditing using SAM and told it to monitor sucess and failure
for "chown,chmod...etc.." Then I enabled auditing and as a user without
permissions to access the file, tried to modify the permissions using
chmod and chown (on /etc/group). When I go and view the logs using the SAM
GUI, it shows no even for the action. Is this a known problem with HPUX
logging? Or am I missing something? Why would HP include the tool if it
doesn't work? I have a non-technical user who needs to be able to "point
and click" to SAM and then check the audit logs for various activities.
Can anyone steer me in the direction of how to get auditing to work
properly using SAM? We need to monitor failed/successfull logins, system
file access attempts and password changes (amoung other things).

	Any help would be appreciated!

		-Celtic