Use the following command to check authentication service logs. It applies only to the Multitenancy release for now.
[root@kronpam~]#tail -100f /pam/logs/auth.log