/var/log/secure
/var/log/auth.log
/var/log/messages
/private/var/log/asl.log
/private/var/log/system.log