- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - OpenVMS
- >
- Re: Logout trace on accounting
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-08-2010 01:00 AM
тАО04-08-2010 01:00 AM
Logout trace on accounting
is needed to trace the login/logout access on openvms system, I suppose that a no invasive method is to use the accounting. Using the account/type=process/process=interactive command I can see the login only, not the logout. Any suggestions about? Thanks Gabriele
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-08-2010 01:03 AM
тАО04-08-2010 01:03 AM
Re: Logout trace on accounting
Oswald
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-08-2010 01:20 AM
тАО04-08-2010 01:20 AM
Re: Logout trace on accounting
if you turn on image accounting ($ SET ACC/ENA=IMAGE), you could also actually see the LOGINOUT image activations for login and logout in the accounting file.
Note that activating image accounting will increase the size and growth rate of your accounting file.
Volker.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-08-2010 02:02 AM
тАО04-08-2010 02:02 AM
Re: Logout trace on accounting
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1402904
With process accounting, nothing is written to the accounting file until the process is deleted. With auditing, the login information is written shortly after the login completes.
Jon
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-08-2010 05:45 AM
тАО04-08-2010 05:45 AM
Re: Logout trace on accounting
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-08-2010 07:03 AM
тАО04-08-2010 07:03 AM
Re: Logout trace on accounting
Are you looking to track specific IP activities, and not the generic login and logout activities as were mentioned in the original posting?
If so, which IP activities? And which IP stack?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-09-2010 06:23 AM
тАО04-09-2010 06:23 AM
Re: Logout trace on accounting
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-09-2010 07:25 AM
тАО04-09-2010 07:25 AM
Re: Logout trace on accounting
-
If you're not seeing ssh activity in the audit logs and if you have auditing for (at least for testing purposes) all process login and logout types, then that's indicative of an issue between the ssh daemon and OpenVMS.
I'd check for ECOs for whatever IP stack and IP version you're using here and then (if you have support and if the problem persists) ring up HP.
There have been various reports of, um, certain omissions and certain design oddities within the implementation of authentication within at least a few versions of the TCP/IP Services ssh daemon. I'd thought much of that had been remediated, however.
Based on a quick check with /SSH Secure Shell OpenVMS (V5.5) 3.2.0 on COMPAQ Professional Workstation - VMS V8.3/ and TCP/IP Services /V5.6 - ECO 4/, I do see login audits for a network and then a detached user; they're not the typical interactive login audits I'd tend to expect for this stuff, so they may be slipping past your selection criteria. The detached process login is probably going to be the most interesting here; that's the one you'll want to collect.
It'd be more typical if these audits were interactive logins; not sure what's up with this stuff, but it looks to be how the ssh daemon is working.