System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

User Based Auditing in HP-UX 11.23

unixinfopk
Occasional Visitor

User Based Auditing in HP-UX 11.23

Hi,

 

Anyone have the idea to enable user based auditing in HPUX 11.23. Like if we want to audit all root users or any specific user.

 

We have tried to enable user based auditing but logs shows that auditing for all users which are created in hpux.

 

Thanks & Kind Regards,

 

Sajjad Ahmed 

2 REPLIES
sathishg
Occasional Visitor

Re: User Based Auditing in HP-UX 11.23

Hi,

 

I am trying to enable auditing on hp-ux 11.23. I get the following error:

 

#  audsys
cannot open and lock /.secure/etc/audnames;
verify that the auditing system has been installed properly,
and the /.secure/etc directory exists, prior to running this command

 


I have also installed StdModSecExt from https://h20392.www2.hp.com/portal/swdepot/displayInstallInfo.do?productNumber=StdModSecExt&kiosk_app=&kiosk_id=

 

But I am unable to run audit.

 

Is there anyother package I have to install?

 

Thank you.

 

Best,
Sathish.

sathishg
Occasional Visitor

Re: User Based Auditing in HP-UX 11.23

Now I am able to run audsys command without any error and it is capturing some events. But events like user login, file deleted by an user is not being captured.

 

Is someone running auditing to capture user events successfully?

 

 

Thank you.

 

Best,

Sathish.