cancel
Showing results for 
Search instead for 
Did you mean: 

unsuccessful su

Ted Kidd
Occasional Visitor

unsuccessful su

I am trying to get notifications for an unsucessful su on Tru64 5.1A. I get notifications for a successful su. In our syslog.conf we have auth.debug set to write to a file and /dev/console. The su events do not even get logged in the sialog.
2 REPLIES
Ann Majeske
Honored Contributor

Re: unsuccessful su

The sialog is designed for occasional use in debugging SIA problems, you should not be using it for auditing authentication events.

To audit authentication events (including su) you should use the Audit subsystem. See the Security manual for information on the Audit subsystem.
Ivan Ferreira
Honored Contributor

Re: unsuccessful su

Instead of using su, you can install and use SUDO. With sudo you can grant the use of certains commands (including su) to other users. The good thing is that you can configure sudo to log ALL commands executed with sudo to a file.
Por que hacerlo dificil si es posible hacerlo facil? - Why do it the hard way, when you can do it the easy way?