- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - OpenVMS
- >
- Re: how to find the users who have high privilege
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-15-2005 08:18 PM
тАО09-15-2005 08:18 PM
Re: how to find the users who have high privilege
thank you all the same. :)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-15-2005 09:12 PM
тАО09-15-2005 09:12 PM
Re: how to find the users who have high privilege
I sometimes use
http://vms.process.com/scripts/fileserv/fileserv.com?uaf
for this sort of thing
$ UAF :== $dev:[dir]UAF.EXE
$ UAF/SELECT=(PRIV=CLASS=ALL,DEFPRIV=CLASS=ALL) /DISPLAY=(USERNAME,PRIV,DEFPRIV)
will list all the users with privs in the All class. For information on privilege classes see the Security Manual.
To list all users with OPER
UAF/SELECT=(PRIV=OPER,DEFPRIV=OPER) /DISPLAY=(USERNAME)
Purely Personal Opinion
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-18-2005 07:32 AM
тАО09-18-2005 07:32 AM
Re: how to find the users who have high privilege
Bob C
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-18-2005 12:11 PM
тАО09-18-2005 12:11 PM
Re: how to find the users who have high privilege
you mean that this tool can be run on Windows and read data from VMS??
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-18-2005 12:29 PM
тАО09-18-2005 12:29 PM
Re: how to find the users who have high privilege
Those tools are good.
If you have (g)awk or perl installed you can do something like:
$mcr authorize list/full
$ gawk "/^User/{u=$2} / Priv/{p=$1} / OPER /{print u,p}" sysuaf.lis
or
$ perl -ne "($a,$b)=split; $u=$b if /^Use/; $p=$a if /\sPriv/; print ""$u $p\n"" if /\sOPER/" sysuaf.lis
Or with a DCL loop workign directly on the source (SYSUAF.DAT) exploiting the following info:
$ pipe libr/ext=$uafdef/out=sys$output sys$library:lib.mlb | searc sys$pipe q_priv
$EQU UAF$Q_PRIV 412
$ pipe libr/ext=$prvdef/out=sys$output sys$library:starlet.mlb | search sys$pipe v_oper
$EQU PRV$V_OPER 18
---- uaf_oper.com ---
$open /read /share uaf 'f$parse("SYSUAF","SYS$SYSTEM:.DAT",,,"SYNTAX_ONLY")
$loop:
$ read/end=done uaf rec
$ if f$cvsi(412*8+18,1,rec) then write sys$output f$extr(0,12,rec)
$ goto loop
$done:
$close uaf
fwiw,
Hein.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-18-2005 08:49 PM
тАО09-18-2005 08:49 PM
Re: how to find the users who have high privilege
But there are other ways to get OPER. SETPRV for example.
Wim
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-19-2005 02:48 AM
тАО09-19-2005 02:48 AM
Re: how to find the users who have high privilege
$ pipe mcr authorize show */brief | search sys$input: all,system,oper /output=privileged_users.lis
Robert
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-19-2005 04:13 AM
тАО09-19-2005 04:13 AM
Re: how to find the users who have high privilege
care to elaborate on your EQU command?
AFAIK it is not standard DCL....
Proost.
Have one on me.
jpe
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-19-2005 06:08 AM
тАО09-19-2005 06:08 AM
Re: how to find the users who have high privilege
>$EQU UAF$Q_PRIV 412
That is not a DCL command ;-)
It's one line in module ($uafdef) in Macro library (sys$library:lib.mlb) extracted by this command:
$ pipe libr/ext=$uafdef/out=sys$output sys$library:lib.mlb | searc sys$pipe q_priv
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-21-2005 08:26 PM
тАО09-21-2005 08:26 PM
Re: how to find the users who have high privilege
--------------------------------------------------------------------------------
Hi Bob
you mean that this tool can be run on Windows and read data from VMS??
/Exeactly. It is a super monitor and alerts in red problems and can fix many conditions. For example it can fix quorum idssues. It warns if memory tight situations and many problems. Because it has power, it must be on the same lan on the system.
We are set up to do the anaylsis for you for a reasonable fee as well.
It also checks file protections and all sorts of goodies. It has a companion software, System Detective that sets up rules on your VMS system.
send mail to robert.comarow@hp.com for more specifics.
I'm impressed.