how to maintain a track record of user activity at O/S level

[Muhammad Ahmad]

Hi,

O/S: 11.11
we need to maintain a track record of activities of "USERA" (one of our application user).
track record means his executed commands, with time stamp.
should we use "sudo" for that purpose?
if yes please guide about where to install and how to configure sudo.

Regards,

Ahmad.

[AwadheshPandey]

you should use sudo. go to link
http://www.unixguide.net/hp/faq/7.1.2.8.shtml

further you need to configure /etc/sudoers file as per your requiremts

[marvik · Accepted solution]

Try using sudosh its basically a topup on sudo.You ill have to give a sudo entry like this in /etc/sudoers

marvik ALL=(ALL) NOPASSWD: /usr/local/bin/sudosh

and ask user to use "sudo sudosh" . It will generate files like thi sbelow for every user with time stamp & commands used and its output.Hope that helps

marvik-root-script-1191845617-nz1XY46c8AgiEkmI
marvik-root-time-1191483206-XjFHnJKqsOQwSU02
marvik-root-input-1190784713-ub7dfBDjFHnpLMsO

Cheers
Marvik

[Shrikant Lavhate]

Hi,

>one of our application user
You can track users activity on server not inside application.

For sudo use and how to configure its files all details are at: http://www.unixcities.com/sudo/index.html


-=ShRi=-

[Muhammad Ahmad]

Hi,

I have successfully configured sudo, as far as the "UserA" whenever use the root priveledge through sudo.
is there any way to log down the "UserA" activity whenever he tried to use the priveledge of "UserB" {UserB is not a root user} ?

[Dennis Handly]

>is there any way to log down the "UserA" activity whenever he tried to use the privilege of "UserB"?

How is UserA becoming UserB? If he is using su(1), no, other than using a wrapper. And why bother since UserA knows the password for UserB. (There was a recent thread about how silly this was.)

You of course can allow sudo to allow UserA to do commands as UserB and then limit them.
This thread may help:
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1187025