I was able to see the log and these are the entries after I ran the kickstart routine. Is there anything unusual in there?.:
savantadev:admin admin$ tail -f /var/log/secure.log
Feb 2 13:57:15 savantadev /System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/Ma cOS/AppleVNCServer[88972]: Authentication: SUCCEEDED :: User Name: pcottrell :: Viewer Address: xxx.xxx.xxx.xxx :: Type: DH
Feb 2 14:19:47 savantadev /System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/Ma cOS/AppleVNCServer[88972]: Authentication: SUCCEEDED :: User Name: admin :: Viewer Address: xxx.xxx.xxx.xxx :: Type: DH
Feb 2 15:47:20 savantadev sshd[91196]: in pam_sm_authenticate(): Failed to determine Kerberos principal name.
Feb 2 15:47:25 savantadev sshd[91194]: Accepted keyboard-interactive/pam for admin from xxx.xxx.xxx.xxx port 55603 ssh2
Feb 2 15:47:25 savantadev com.apple.SecurityServer[46]: Session 0x2f394d created
Feb 2 15:47:25 savantadev com.apple.SecurityServer[46]: Session 0x2f394d attributes 0x20
Feb 2 15:57:10 savantadev com.apple.SecurityServer[46]: Session 0x2f04f4 dead
Feb 2 15:57:10 savantadev com.apple.SecurityServer[46]: Killing auth hosts
Feb 2 15:57:10 savantadev com.apple.SecurityServer[46]: Session 0x2f04f4 destroyed
Feb 2 16:01:58 savantadev /System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/Ma cOS/AppleVNCServer[91468]: Authentication: SUCCEEDED :: User Name: pcottrell :: Viewer Address: xxx.xxx.xxx.xxx:: Type: DH