- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - OpenVMS
- >
- audit logins for a particular user
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-16-2010 03:31 AM
тАО11-16-2010 03:31 AM
i would like to audit logins for one particular user.
At present we audit all logfailures and breakins.
But I'm not sure how to set up auditing the logins for just one user.
Any advice is greatly appreciated
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-16-2010 04:31 AM
тАО11-16-2010 04:31 AM
Re: audit logins for a particular user
Do a $show audit and post the details here.
Have a look at the ANAL/AUDIT utility - This will allow you to interrogate the security audit journal file.
E.g. $ ANAL/AUDIT/FULL/SEL=USER=
HTH
Craig
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-16-2010 04:36 AM
тАО11-16-2010 04:36 AM
Re: audit logins for a particular user
Thanks for getting back to me.
current settings are :
System security alarms currently enabled for:
ACL
Authorization
Audit: illformed
Breakin: dialup,local,remote,network,detached
Logfailure: batch,dialup,local,remote,network,subprocess,detached
System security audits currently enabled for:
ACL
Authorization
Audit: illformed
Breakin: dialup,local,remote,network,detached
Logfailure: batch,dialup,local,remote,network,subprocess,detached
I'm happy enough with using the ANALYZE/AUDIT commands for single users, but at present we dont audit successfull logins.
I know to set it up for all users would be :
set aud /audit /enable=( login=all),
but I dont want to record successful logins for all users - just for one particular user.
Cheers
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-16-2010 04:43 AM
тАО11-16-2010 04:43 AM
Re: audit logins for a particular user
$ MC AUTHORIZE MOD
What info do you want to capture regarding the login session?
Can you get it from ACCOUNTING instead?
Craig
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-16-2010 04:46 AM
тАО11-16-2010 04:46 AM
SolutionDan
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-16-2010 04:46 AM
тАО11-16-2010 04:46 AM
Re: audit logins for a particular user
I just want to record the dates and times and from where the user logged in.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-16-2010 04:55 AM
тАО11-16-2010 04:55 AM
Re: audit logins for a particular user
and log info lik:
f$getdvi("tt",""tt_accpornam")
or a $show term
That coupled with info from ACCOUNTING should get you what you want.
Craig
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-16-2010 05:23 AM
тАО11-16-2010 05:23 AM
Re: audit logins for a particular user
this may or may not be usefull to you, but many moons ago we had a need to occasionally allow remote service access to our system by a remote package supplier.
We DID need to know if they ever touched sensitive info they had no business with.
We provided a captive login to an account, which only did a
$ SET HOST 0/LOG=
with embedded username/password
to another account on another device.
The "entry" account directory was pretty hard shielded and tripwired for any access by the "work" account.
The entry account was normally disusered, and only activited when needed, so we knew when a review was desired.
This may or may not be what you need, but it worked for us.
hth
Proost.
Have one on me.
jpe
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-16-2010 05:51 AM
тАО11-16-2010 05:51 AM
Re: audit logins for a particular user
i think using the users login.com file will be the easiest route. Will look into this
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-16-2010 06:04 AM
тАО11-16-2010 06:04 AM
Re: audit logins for a particular user
Craig