added section on syslog

diff --git a/TROUBLESHOOTING b/TROUBLESHOOTING
index 8503b46d6ad9e86fd6a7fa3a4af98b33415a8729..81721b5a1da8841c04e8e151f1fda8179ffe63a0 100644 (file)
--- a/TROUBLESHOOTING
+++ b/TROUBLESHOOTING
@@ -8,6 +8,17 @@ A) Sudo must be setuid root to do its work.  You need to do something like
    on must *not* be mounted with the nosuid mount option or sudo will
    not be able to work.
 
+Q) Sudo is setup to log via syslog(3) but I'm not getting any log
+   messages.
+A) Make sure you have an entry in your syslog.conf file to save
+   the sudo messages.  The default log facility is local2
+   (configurable in options.h) so you would want something like:
+       local2.debug                            /var/adm/sudo.log
+   or
+       local2.debug                            @loghost
+    depending whether you want to forward the messages to another
+    host or keep them locally.
+
 Q) When sudo asks me for my password it never accepts what I enter even
    though I know I entered my password correctly.
 A) Try running configure with the --with-getpass option.  After this