topic Re: Login/Logout Time in Operating System - HP-UX

Login/Logout Time

pran — Sat, 07 Dec 2002 23:17:35 GMT

Hi,

How do i get the login/logout date/time
of each user session ? and also invalid
login attempts ??

regards,
pran

Re: Login/Logout Time

Patrick Wallek — Sat, 07 Dec 2002 23:24:23 GMT

Login and logout times - look at the 'last' command. 'man last' for more details.

Invalid login attempts - look at the 'lastb' command. 'man lastb' for more details.

Re: Login/Logout Time

pran — Sun, 08 Dec 2002 00:02:47 GMT

thanx patrick,

any audit options available in sam
to get this info from the audit files??

Re: Login/Logout Time

Rajeev Shukla — Sun, 08 Dec 2002 00:05:58 GMT

Hi Pran,
As said last and lastb command should solve your purpose. Also if you are loging details in syslog that should also give you details of this and also successful/unsuccessful ftp.

Cheers
Rajeev

Re: Login/Logout Time

Rajeev Shukla — Sun, 08 Dec 2002 00:08:25 GMT

Yes pran for that you'll have to enable auditing for the users which takes a lot of disk space. But if you have enough space you can enable the user auditing through SAM.

Cheers
Rajeev

Re: Login/Logout Time

Bill Hassell — Sun, 08 Dec 2002 00:21:49 GMT

NOTE: Make sure that /var/adm/btmp exists. For 10.20 and earlier, root must create this file, and for security reasons, it must be 600 permissions (never readable by users). To turn on audit features, the system will be converted to a Trusted system which includes a shadow password, password history and many other user controls.

Auditing can include a huge number items (see SAM for the choices) which will create very large log files very quickly. The default location for the logfiles is the / filesystem, a very bad location for fast growing files, so tell SAM to place the auditing files in /var/adm.

One other note is that on a busy system, auditing system calls can create a significant additional load on the system.

Re: Login/Logout Time

pran — Sun, 08 Dec 2002 10:53:05 GMT

Thanx everybody!

We have a system in trusted mode.
I have turned on auditing for oracle id and
the audit filesize reaches 90mb everyday.
(the system still not in prodn!!)
Can somebody tell me the minimum/required audit settings.
(For users, system calls and events)

Regards,
Pranesh.

Re: Login/Logout Time

Robert-Jan Goossens — Sun, 08 Dec 2002 11:41:39 GMT

Hi Pran,

Hope next link will help you !

Discussion about audit and minimum amount of audit functions setup.

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xa123543254bfd611abdb0090277a778c,00.html

Kind regards,

Robert-Jan.

Re: Login/Logout Time

pran — Sun, 08 Dec 2002 16:01:57 GMT

Thanx Everybody!!

Will get back to you incase i need mor info.

Cheers,
Pran