The Users

[Filosofo]

Hello,
I hope to explain in comprehensible mode my problem.
I must monitor what the users does....who connect to the server..etc.
I hope that you can help me...

Thanks

Filo

[Keely Jackson]

Hi

You could always capture the information from .sh_history.

Not an entirely elegant solution though. Also, take a look at auditing - man audit.

Cheers
Keely

[Robert-Jan Goossens]

Hi,

# Man lastcomm

Robert-Jan.

[Michael Tully]

You could turn on system accounting, but watch out for the space requirement it needs

/usr/sbin/acctcom
$ man acctcom

This will give you information on tty ports, time stamps of who was logged in. There is also 'runacct'

also
$ man pacct

Regards
Michael
"When I have trouble spelling, it's called fat finger syndrome."

[Karthik S S]

Enable inetd logging so that all connection establishments are logged it syslog.

Regards,
Karthik

If you don't know the right solution never try the wrong ones :-)

[Vicente Sanchez_3]

Hello,
Another way to see user acces are last and lastb commands.

Regards, Vicente.

[K.Vijayaragavan.]

Check the content of the files.

/var/adm/sulog
/var/adm/syslog/syslog.log

Use the commands,

w
last
netstat -a

[John Meissner]

while solutions have already been given that I would recommend another option would be to put a line in their .profile
script /tmp/`logname`.`date`

Depending on how muc they do this file will get big over time.

[Ross Zubritski]

If you want to get as granular as auditing and granting commands to non super users, check out sudo. It generates a pretty nice audit trail if setup properly.

Regards,

RZ