Simpler Navigation for Servers and Operating Systems
Completed: a much simpler Servers and Operating Systems section of the Community. We combined many of the older boards, so you won't have to click through so many levels to get at the information you need. Check the consolidated boards here as many sub-forums are now single boards.
Operating System - Tru64 Unix
cancel
Showing results for 
Search instead for 
Did you mean: 

Sysloging from Remote Users

Bardill
Occasional Visitor

Sysloging from Remote Users

Hi
I am a SUN Sysadmin.
Now i musst supervise a TRUE64 UNIX System.

I would like to supervise all user log in. the user which via telnet, Rlogin etz at the system announce themselves. With SUN inetd the service with t must be started and in syslog.conf auth.notice inserts to become. What has to be done with TRUE64 everything? can someone help me?
2 REPLIES
Ralf Puchner
Honored Contributor

Re: Sysloging from Remote Users

there are several ways to log user logins.

First it is possible to use the old syslog.conf mechanism by adding the same keywords (man syslog.conf).
In 5.x systems you can use the evm-system by filtering sys.unix.syslog.auth events (man evm).
Or you can use the C2 subset (man secsetup)
Or you can use the audit feature (man 7 audit)
Help() { FirstReadManual(urgently); Go_to_it;; }
Michael Elleby III_1
Trusted Contributor

Re: Sysloging from Remote Users

Here is an idea that I use on the UNIX systems I support (T64 included) that might help in the short term:

I modify each user's profile to invoke a log entry each time the user logs in. Especially the root account. A few of my T64 systems, I had to give root psw to Security group, and a couple of others, so I did this to 'monitor' the login.

If I'm not mistaken, aren't ftp's logged in the auth.log file in syslog.dated directory?

Mike Elleby
Knowledge Is Power