topic Re: User ID audit in Operating System - HP-UX

User ID audit

bijoy k — Sun, 22 Feb 2009 10:08:26 GMT

Hi All,

Can anyone tell me , how to find the date , when the User ID got created in a trusted systems..

Regards..

BK

Re: User ID audit

Patrick Wallek — Sun, 22 Feb 2009 17:07:49 GMT

You can't. That information is not kept anywhere.

Re: User ID audit

Dennis Handly — Sun, 22 Feb 2009 18:30:04 GMT

You might be able to look for the oldest files in the user's home directory, possible a "." file:
ll -atr ~user-id

Re: User ID audit

Patrick Wallek — Sun, 22 Feb 2009 19:04:34 GMT

>>You might be able to look for the oldest
>>files in the user's home directory, possible
>>a "." file:

That's may work as long as the files have not been modified. There is no guarantee that it would be 100% accurate though.

Re: User ID audit

bijoy k — Mon, 23 Feb 2009 06:05:46 GMT

Hi Patrick ,

Yes , correct . We cannot ensure that fully. Can I keep this query open for some days to get any more ideas..

Regards..

Bijoy

Re: User ID audit

Avinash20 — Mon, 23 Feb 2009 07:08:43 GMT

There are some ITRC thread open for the same query
Please check if this helps you

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1111045

PS: Assign points.