topic Re: Audit password changes in Operating System - OpenVMS

Audit password changes

Donald Robichaud — Wed, 01 Jun 2005 10:44:21 GMT

Is it possible with the $ANALIZE/AUDIT/EVENT_TYPE=(SYSUAF)command to generate a report that just shows password changes to the SYSUAF file?

Re: Audit password changes

Joseph Huber_1 — Wed, 01 Jun 2005 11:33:43 GMT

Yes,
if the AUTHORIZATION class is enabled:
$ set audit/audit/enable=authorization

Re: Audit password changes

Joseph Huber_1 — Wed, 01 Jun 2005 11:35:20 GMT

Ah sorry, was typing too fast:
You want ONLY password changes, not other sysuaf changes.
Sorry, no at least I don't have an answer for that.

Re: Audit password changes

Dale A. Marcy — Wed, 01 Jun 2005 11:39:15 GMT

Try the following command on your audit file:

$ analyze/audit/select=field_name=("Password Date")

Re: Audit password changes

Donald Robichaud — Wed, 01 Jun 2005 12:50:18 GMT

Thanks Dale. That's exactly what I was looking for.

Re: Audit password changes

Ian Miller. — Thu, 02 Jun 2005 04:31:01 GMT

Donald, see
http://forums1.itrc.hp.com/service/forums/helptips.do?#33
for assigning points and
http://forums1.itrc.hp.com/service/forums/helptips.do?#16
for closing threads.

Re: Audit password changes

Jeroen Hartgers_3 — Thu, 02 Jun 2005 10:07:43 GMT

If audit is not an option it's also possible to create a dcl procedure because pwd change date is listed in de sysuaf.

Re: Audit password changes

Jan van den Ende — Thu, 02 Jun 2005 22:54:54 GMT

Donald,

the idea behind IanÂ´s remark really is that you do not leave ANY unassined answers...
Fully at your discretion, even assigning 0 (zero) points is fully OKay, but you ARE requested to invest at least THAT effort to anybody that took the time to answer you.

Proost.

Have one on me.

j