You must configure the registry to enable logging from LDAP.
Create a registry value at HKEY_LOCAL_MACHINE\Software\Novell\Login\Ldap
The following events are logged:
Event ID 1 Informational: NSL user login
Event ID 2 Informational: LDAP user password change
Event ID 3 Warning: Workstation unlocked by different User
Open nslevtsvc.ini in a text editor and add the following section about the new information source:
[wmi]
event_source=LDAPAuth
The following events are logged:
Event ID 1 Informational: NSL user login
Event ID 2 Informational: LDAP user password change
Event ID 3 Warning: Workstation unlocked by different User