Normally it would log things and you'll see the userid and attempts to access files, etc. showing up.
You may need to open an SR to figure out why ncp is dying.
I'm not sure if you can restart the ncp processes, to be honest, and maybe that would show something.
NRM doesn't use ncp for authentication, that I'm aware of. If you use a non-root user I believe it uses LUM at that point.