VMS user management/reporting tools

[Nate Klostermann]

I'm looking for a Windows tool (I guess it could be a native VMS tool) to manage users account on our OpenVMS 7.3-2 server. I would like to easily be able to run reports on the user accounts (such as last logged in date, what users haven't logged in in 30 days, 90 days, etc.) Possibly automatically disable someone if they haven't logged in in 30 days.... Any suggestions?

[Ian Miller.]

The OpenVMS Management Station
http://h71000.www7.hp.com/openvms/products/argus/index.html
is a GUI for managing users (add/delete etc)
However I don't think it does the reports you want.

[Ian Miller.]

parhaps this
http://www.pointsecure.com/products/pointaudit.asp

[Jan van den Ende]

Nate,

Not sure if this is even remotely what you are looking for, but..

we arranged to get the mutations to the Personnel System delevered to us, and wrote some DCL to forward any changes that have relevance to SYSUAF or any application.

Think New user; contract termination date; department (coupled to UIC group with us), predefined set of allowed/disallowed applics, in-applic rank-coupled authorizations, name changes (Marriage, divorce, initial typo correction) etc.

It's both a disadvantage and an advantage:
YES, you have to write it yourselve, YES, you need a lot of detailed knowledge of business rules, but also: YES, you (can...) get EVERYTHING you want, and YES, it is all done without typo's, "not in today", and ANY human-related error-causes (well, the DCL's ARE human-written :-( .
And the prospect of entering on average some 400 mutations per week into a GUI is not very appealing (at least, to me it is not).

Nowadays, I spend some 10 minutes every week to check the logs for any indication of non-smooth operation, and I tend to begin to consider even THAT as a waste of time..

Bottom line: if you have serious amounts and/or non-trivial needs: it pays to automate it yourself to your own needs.


fwiw


Jan

[Jan van den Ende]

i forgot...

Welcome to the VMS forum!!

[Karl Rohwedder]

Mayby anything 'less' than a windows gui is also acceptable?

There is e.g.:
- PROFILE - a screenoriented account profiler,
see http://ftp.uma.es/Vms/Wku/profile.zip

- Joe Meadow's XUAF - allows selection of
users acc. to selectable specs and outputs
selectable fields (dom't know where to find)

- GETUAI - returns selectable user
information in DCL symbols, handy for
programming, I tweaked it a little to
allow for new flags like PWDMIX...)
( This software was suvmitted to ftp.spc.edu by Nick Metrowsky of
Rice University; Houston, Texas.)

[Ian Miller. · Accepted solution]

other tools to search the UAF for usernames with criteria such as you listed
http://vms.process.com/scripts/fileserv/fileserv.com?scanuaf
http://vms.process.com/scripts/fileserv/fileserv.com?uaf

[Lokesh_2]

Hi,

You can use Polycenter Security Compliance Manager. This product has the feature that you want (like automatic disabling of accounts..).

Thanks & regards,
Lokesh

[Ian Miller.]

PCM (DECinspect) is fine but CA's replacement product is not :-(

[Nate Klostermann]

Thanks for all the replies! Many thanks!

[Kent Brodie]

Somewhere in the older decus collection(s) wasa REALLY great tool called "showuaf", that I used extensively.

(Sorry- native VMS, not windows).

[Nate Klostermann]

I am going to go with SCANUAF. This tool is exactly what I was looking for. Thanks again.