# ssh
Aug 24 15:43:37 dnscrypt1 sshd[8562]: pam_unix(sshd:account): expired password for user dwheeler (root enforced)
Aug 24 15:43:37 dnscrypt1 sshd[8562]: Accepted publickey for dwheeler from [] port [] ssh2: ED25519 SHA256:Z4cQ4XL0gr+JllWF4ycNcePr61Ln+O9brEaeoSiOlR0
Aug 24 15:43:37 dnscrypt1 sshd[8562]: pam_unix(sshd:session): session opened for user dwheeler(uid=1000) by (uid=0)
Aug 24 15:43:37 dnscrypt1 systemd-logind[273]: New session 32 of user dwheeler.

# tty
Aug 24 15:44:01 dnscrypt1 login[1767]: pam_unix(login:auth): user [dwheeler] has blank password; authenticated without it
Aug 24 15:44:01 dnscrypt1 login[1767]: pam_unix(login:account): expired password for user dwheeler (root enforced)
Aug 24 15:44:01 dnscrypt1 login[1767]: pam_unix(login:session): session opened for user dwheeler(uid=1000) by LOGIN(uid=0)
Aug 24 15:44:01 dnscrypt1 systemd-logind[273]: New session 33 of user dwheeler.
Aug 24 15:44:01 dnscrypt1 login[1767]: DIALUP AT ttyS0 BY dwheeler
Aug 24 15:44:01 dnscrypt1 login[1767]: LOGIN ON ttyS0 BY dwheeler
Aug 24 15:44:05 dnscrypt1 login[1767]: pam_unix(login:session): session closed for user dwheeler
Aug 24 15:44:05 dnscrypt1 systemd-logind[273]: Session 33 logged out. Waiting for processes to exit.
Aug 24 15:44:05 dnscrypt1 systemd-logind[273]: Removed session 33.