find out all user

[prateek_1]

I need to find out all user who logged in my host and what modification they done.

[Ganesan R]

Hi,

Need more details. If you need to know the currently logged in users use #who -u command or #w

If you have enabled auditing you can findout which user did what.

[Sani]

Hi ,

use "whodo" to find out logged in users and process running by those users.

Regards
Sani

[prateek_1]

I need all user currently as well as previously logged on system and in which file they done any modification with the IP address of user.

[T G Manikandan]

What version of HPUX you are running, you need to convert your system to a trusted mode to enable auditing to find all information.

[Johnson Punniyalingam]

Hi Prateek,

Have you turn on audting in your Server .?

If you Server Trusted System.? if not bit difficult... :(

# last -R user1 user2 user3

(above command will give login history with IP address of user1,user2,user3)

Hope This Helps,

Tks,
Johnson

[Robert-Jan Goossens]

Prateek,

You need to have a look at the system audit tools. I don't know what versionof HPUX you are running, but have a look at the below link and search for audit.

http://h20392.www2.hp.com/portal/swdepot/searchProducts.do

Regards,
Robert-Jan

[prateek_1]

Hi,
how can i turn on audting in my Server,commands mentioned by you give me o/p like--
bash-2.05# last -R user1 user2

WTMPS_FILE begins at Thu Jan 29 19:42:29

[prateek_1]

im using 11.31 sep08 fusion.

[Ganesan R]

Hi Prateek,

Use SAM to convert the system into trusted mode. Once you converted to trusted you can enable auditing.

SAM -> Auditing and Security ->Goto Actions ->Convert the sytem