can you post the output of last command?
Maybe we can find something like the account currently login when server reboots.
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos