Sponsored Content
Full Discussion: RBAC & Logging
Operating Systems Solaris RBAC & Logging Post 302402334 by bitlord on Tuesday 9th of March 2010 12:33:52 PM
Old 03-09-2010
Thanks this a good start. RBAC profiles don't normally have a home directory, so sh_history or .bash_history will not work for commands.

I need to see what commands a user uses under anther profile.

Lets say the profile name is tape and the user name is username. If username logs into the system and needs to use the tape drive he will then need to su to tape.

I need to see what username is doing while using the role tape. I need to be able to see the commands username is using, but not to be confuse by the commands of other users.


Thanks for your help
 

10 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

RBAC logging

Hi gurus: I have not come accross any links on the internet that shows how to set up logging in RBAC and also is it possible to get the granularity and simplicity of sudo logging in RBAC. I have heard that RBAC logs are complicated to read and not as simple and granular as sudo logs. Your help... (0 Replies)
Discussion started by: geomonap
0 Replies

2. Solaris

Rbac

I am trying to let user asillitoe su to the godbrook role to execute commands. I have editted files as follows: user_attr: asillito::::type=normal;roles=godbrook godbrook::::type=role;profiles=Gadbrook,All prof_attr: Gadbrook:::Allow root commands to be used by godbrook: exec_attr:... (0 Replies)
Discussion started by: chrisdberry
0 Replies

3. Solaris

RBAC Help

do i have to create a new account to add a role? i want the sysadmin login i have 3 users on my systems sysadmin secman oc01 also 3 profiles SA (goes t0 sysadmin account) SSO (goes to secman account) LMICS (goes to oc01 account) the user accounts are located in /h/USERS/local the... (4 Replies)
Discussion started by: deaconf19
4 Replies

4. UNIX for Dummies Questions & Answers

Unix Rbac

Can anyone help me on "How to change Unix to support RBAC policy"? (4 Replies)
Discussion started by: JPoroo
4 Replies

5. Solaris

rbac problem.

Hi all! On backup server with contab my script worked, but one command don't fine to be executed: bash-3.00$ scp itadmin@172.17.0.44:/export/backups/* /bckp1/opencms/bcp_`date +%Y%m%d`/ www-zone.cfg 100%... (0 Replies)
Discussion started by: sotich82
0 Replies

6. Solaris

Difference between sudo & RBAC

Hello Everybody I would like to know any major difference between sudo & RBAC as I am bit familiar with RBAC but not with sudo (2 Replies)
Discussion started by: girish.batra
2 Replies

7. HP-UX

RBAC question

hi every one i tried rbac and i made 1- role called GizaRoot 2- group called gizagroup 3- added privlage autherization called "m.k" /usr/sbin/useradd:dflt:(m.k,*):0/0//:dflt:dflt:dflt: i assigned the role to group and add user to that group then su to user and tried to use the command ... (0 Replies)
Discussion started by: maxim42
0 Replies

8. Solaris

Sol10 + OpenLDAP = excessive logging & full file system??!!

Hello all, new to this forum (member of many others). Hopefully I can find help here. SERVER: Brand new server Oracle Enterprise SPARC T4-1 Loaded Solaris SPARC 10 u10, patched to 147440-27 Loaded OpenLDAP v2.4.30 Loaded Berkley DB 4.7.25.NC Loaded OpenSSL 1.0.1c Note: All packages are... (2 Replies)
Discussion started by: Wraith_G2IC
2 Replies

9. Linux

Syslog not logging successful logging while unlocking server's console

When unlocking a Linux server's console there's no event indicating successful logging Is there a way I can fix this ? I have the following in my rsyslog.conf auth.info /var/log/secure authpriv.info /var/log/secure (1 Reply)
Discussion started by: walterthered
1 Replies

10. Solaris

Connection Logging in Solaris 10 & 11 - Beginner

Excuse my ignorance as I am very new to working with Solaris. I'm looking for documentation on how to create a network log in Solaris 10 & 11. I don't wish to edit any of the logs currently the system. I simply want a log that will capture all incoming IP addresses and log them with a time-in... (8 Replies)
Discussion started by: FamousAv8er
8 Replies
scprivipadm(1M) 					  System Administration Commands					   scprivipadm(1M)

NAME
scprivipadm - administer the private IP address range SYNOPSIS
scprivipadm -c netaddr=netaddr[,netmask=netmask] scprivipadm -c netaddr=netaddr[,maxnodes=nodes,maxprivatenets=privnets] scprivipadm -c netaddr=netaddr[,netmask=netmask,maxnodes=nodes,maxprivatenets=privnets] scprivipadm -p scprivipadm -R DESCRIPTION
Note - Beginning with the Sun Cluster 3.2 release, Sun Cluster software includes an object-oriented command set. Although Sun Cluster software still supports the original command set, Sun Cluster procedural documentation uses only the object-oriented command set. For more infor- mation about the object-oriented command set, see the Intro(1CL) man page. The scprivipadm command modifies the current IP address range that is assigned to the Sun Cluster private interconnect. All nodes in the cluster must be in noncluster mode before you run any form of this command. Run this command from one node in the cluster. The scprivipadm command takes as input the private network address. Optionally, the command also takes one or both of the following: o The netmask o The maximum number of nodes and the maximum number of private networks that are ever expected to be in the cluster The command then performs the IP address assignment for the physical adapters and the per-node IP addresses. You can use this command only in the global zone. OPTIONS
The following options are supported: -c Modifies the IP address range that is currently assigned to the cluster. Run the -c option on each node of the cluster. You can use this option only in the global zone. The -c option supports the following suboptions: netaddr=netaddr Specifies the private network address netmask=netmask Specifies the netmask maxnodes=nodes Specifies the maximum expected number of nodes in the cluster maxprivatenets=privnets Specifies the maximum expected number of private networks in the cluster The -c option performs the following tasks for each combination of suboptions: o If you specify the netaddr suboption alone, the command assigns the default netmask, 255.255.248.0, to the private interconnect. The default IP address range accommodates a maximum of 64 nodes and 10 private networks. o If you also specify the netmask suboption, the value that you specify must be equal to or greater than the default netmask. If the specified netmask is less than the default netmask, the command fails and exits with an error. If the specified netmask is equal to or greater than the default netmask, the command assigns the specified netmask to the private interconnect. The resulting IP address range can accommodate a maximum of 64 nodes and 10 private net- works. To assign a smaller IP address range than the default, specify the maxnodes and maxprivatenets suboptions. o If you also specify the maxnodes and maxprivatenets suboptions, the command calculates the minimum netmask to sup- port the specified number of nodes and private networks. The command then assigns the calculated netmask to the private interconnect. The maximum value for nodes is 64 and the minimum value is 2. The maximum value for privnets is 128 and the minimum value is 2. o If you also specify the netmask suboption as well as the maxnodes and maxprivatenets suboptions, the command calcu- lates the minimum netmask that supports the specified number of nodes and private networks. The command compares that calculation to the specified netmask. If the specified netmask is less than the calculated netmask, the com- mand fails and exits with an error. If the specified netmask is equal to or greater than the calculated netmask, the command assigns the specified netmask to the private interconnect. The maximum value for nodes is 64 and the minimum value is 2. The maximum value for privnets is 128 and the minimum value is 2. If the -c option fails, you must run the -R option on each node to repair the configuration before you rerun the -c option. Users other than superuser require solaris.cluster.modify Role-Based Access Control (RBAC) authorization to use this subcom- mand. See the rbac(5) man page. -R Repairs the cluster configuration. Use this option if the command fails while modifying the IP address range on the cluster nodes and the failure results in inconsistent cluster configuration on the nodes. You can use this option only in the global zone. Run the -R option on each node of the cluster. The -R option repairs the cluster configuration and removes any inconsistencies that were caused by a failure to modify the IP address range on all nodes. If you attempt to rerun the -c option without first running the -R option, the configuration change might again fail. Users other than superuser require solaris.cluster.modify Role-Based Access Control (RBAC) authorization to use this subcom- mand. See the rbac(5) man page. -p Displays the current private network address that is assigned to the private interconnect. Run the -p option from any node. You can use this option only in the global zone. The -p option prints the following information: o The private network address o The IP address range in the form of a netmask o The maximum number of nodes and the maximum number of private networks that can be supported by the IP address range Users other than superuser require solaris.cluster.read Role-Based Access Control (RBAC) authorization to use this subcommand. See the rbac(5) man page. To display the current private network address from a node that is in cluster mode, instead run the scconf -p command or the cluster show-netprops command. EXAMPLES
Example 1 Calculating a Custom Private IP Address Range The following command specifies the private network address 172.16.0.0 and calculates the netmask. The command specifies that the calcu- lated netmask must support up to sixteen nodes and up to four private networks in the cluster. # scprivipadm -c netaddr=172.16.0.0,maxnodes=16,maxprivatenets=4 Example 2 Specifying a Private Network Address and Netmask The following command specifies the private network address 172.16.0.0 and the netmask 255.255.248.0. # scprivipadm -c netaddr=172.16.0.0,netmask=255.255.248.0 EXIT STATUS
The scprivipadm command returns with a non-zero value if either of the following conditions occur: o Invalid arguments were provided. o The command was unable to successfully modify the IP address range on all nodes of the cluster. ATTRIBUTES
See attributes(5) for descriptions of the following attributes: +-----------------------------+-----------------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +-----------------------------+-----------------------------+ |Availability |SUNWscu | +-----------------------------+-----------------------------+ |Interface Stability |Evolving | +-----------------------------+-----------------------------+ SEE ALSO
Intro(1CL), cluster(1CL), scconf(1M), scinstall(1M), netmasks(4), networks(4), rbac(5) Sun Cluster Software Installation Guide for Solaris OS, Sun Cluster System Administration Guide for Solaris OS, System Administration Guide: IP Services NOTES
The superuser can run all forms of this command. Users other than superuser require RBAC authorizations. See the following table. +-------+---------------------------------------------------------+ |Option | RBAC Authorization | +-------+---------------------------------------------------------+ |-c | solaris.cluster.modify | +-------+---------------------------------------------------------+ |-R | solaris.cluster.modify | +-------+---------------------------------------------------------+ |-p | solaris.cluster.read | +-------+---------------------------------------------------------+ Sun Cluster 3.2 23 Jun 2006 scprivipadm(1M)
All times are GMT -4. The time now is 02:45 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy