Password change tracking through Auditing

[raiden]

Hi All,

Is there any system call in Auditing feature of HP_UX which can track the password change done on Systems by any user.

If not then how can password changes be track..

Please suggest..

[Steven E. Protter]

Shalom,

Auditing is provided on HP-UX systems by making them trusted.

Tracking it is not a system call, its doing a audit query of the database once created.

For more on this fabulous feature, which will last be present in 11.31 HP-UX read here:

http://docs.hp.com/en/B2355-90121/

SEP

[Dennis Handly]

>SEP: Auditing is provided on HP-UX systems by making them trusted.

I believe on newer OS versions, you can enable auditing without becoming trusted.

[James R. Ferguson]

Hi:

> Dennis: I believe on newer OS versions, you can enable auditing without becoming trusted.

Yes, that's correct with 11.31. See chapter-8 here:

http://docs.hp.com/en/5991-6469/5991-6469.pdf

Too, the Trusted system is deprecated as of 11.31.

Regards!

...JRF...

[raiden]

Thanks for your replies but still it doesnt answer my query . I have auditing already enabled for the system users on my 11.23 IA system.

I just want to how can i track password changes done by any user.

[Dennis Handly]

I'm not sure if there is a direct audit for that. But there is one for executing passwd(1) and for opening the tcb files.

Have you looked at your audit data after you have changed a password?