Sponsored Content
Full Discussion: Track user
Top Forums UNIX for Dummies Questions & Answers Track user Post 302430056 by malcolmpdx on Wednesday 16th of June 2010 12:25:33 PM
Old 06-16-2010
syslog isn't going to help you here. Nor is auditing users .bash_history or other related files, since those are easily removed by the user, or can be set to not be written.

You're going to need to set up the audit subsystem. This can be complex, but there are many webpages and lots of documentation.

Check out Use auditing to track reads and writes in a file, for example.
 

10 More Discussions You Might Find Interesting

1. Programming

keep track of the last 10 commands the user typed

Can I do it like this? if (strcmp(argv, "history")==0) { argv = "10"; execvp(argc,argv); } actually, it doesn't work, How can I modify it? Thanks (17 Replies)
Discussion started by: zhshqzyc
17 Replies

2. UNIX for Advanced & Expert Users

Track user activity --pls help

hi I want to know how to save all the command used by all the used under a particular root with the time stamp in a file. Eg: User Name: UX10 Time: 10:56 Command: LS User Name: UX23 Time: 10:59 Command: MORE abc.txt -Anand (2 Replies)
Discussion started by: anandtharani
2 Replies

3. UNIX for Dummies Questions & Answers

Possible to track FTP user last login? Last and Finger don't track them.

Like the topic says, does anyone know if it is possible to check to see when an FTP only user has logged in? Because the shell is /bin/false and they are only using FTP to access the system doing a "finger" or "last" it says they have never logged in. Is there a way to see when ftp users log in... (1 Reply)
Discussion started by: LordJezo
1 Replies

4. Shell Programming and Scripting

keep track of every user

dear all , I m new to shell programming and I need your help. Actually i want to keep track of all the commands executed in a bash prompt of users , very much in same manner as it is displayed when we run "history" command. now the users are smart enough as they delete their history by... (6 Replies)
Discussion started by: xander
6 Replies

5. AIX

Track user logoff in AIX 5.3

Hi Does anybody know if there is a way in AIX 5.3 to track how a user was logged off? For instance where the user typed exit, hit crtl D, shell process was killed, etc. I know of the last log entries but this just shows a users login time and duration. I also tried syslog but I only get login... (5 Replies)
Discussion started by: kimyo
5 Replies

6. UNIX for Advanced & Expert Users

Track user commands

Hi, I have a unix server and I am concerned about the security on that server. I would like to be able to write a script that records all the commands that were typed at the command prompt before the user calls the 'history -c' command and deletes all the history. I was thinking about firing or... (7 Replies)
Discussion started by: mishkamima
7 Replies

7. AIX

Track deleted OS user accounts

Recently we've had a couple user accounts mysteriously disappear. Is there any way to track these accounts and determine who/how they were deleted? (2 Replies)
Discussion started by: Sk0glund
2 Replies

8. Homework & Coursework Questions

Track user log!

Use and complete the template provided. The entire template must be completed. If you don't, your post may be deleted! 1. The problem statement, all variables and given/known data: The task is to measure the density of users that are logged on system. The program should check that every 30... (7 Replies)
Discussion started by: petel1
7 Replies

9. UNIX for Dummies Questions & Answers

How to track user activity?

Hi All Please can you help me with the following issue: A certain vendor installed an application in which for a user to log in; the user must use a user created/predefined by the application. And because this application has more than one user its difficult to track who did what and when,... (6 Replies)
Discussion started by: fretagi
6 Replies

10. UNIX for Advanced & Expert Users

Track activity of a user

Hi All We have a job which writes files to a server at a particular time. The files will be created by a particular user ID Today, during the execution of the job, it created a file to the server and the file sat on the server for sometime, but was deleted immediately at the end of the... (4 Replies)
Discussion started by: sparks
4 Replies
removeuser(8)						      System Manager's Manual						     removeuser(8)

NAME
removeuser - Deletes user accounts interactively SYNOPSIS
/usr/sbin/removeuser DESCRIPTION
Security Note If you have enhanced security installed on your system, you should use the dxaccounts command to remove users. See the Security manual and the dxaccounts(8) reference page for more information. The removeuser command is an interactive command for deleting user accounts from your system. It also gives the option of deleting the user's home directory, files and mail. The command prompts you for specific information and informs you of its activity and error condi- tions. The removeuser command invokes /usr/sbin/userdel to delete the user account information from /etc/passwd and the hashed password database (if present). Only the superuser can execute this command. The command performs the following tasks: Asks for a login name for the user to be deleted. Enter the login name. If this entry does not exist in the /etc/passwd file, the command informs you of this and exits. If the entry does exist, the command continues. Displays the entry for the user from the /etc/passwd file and asks if this is the entry you want to delete. If the answer to this query is no, the com- mand indicates that the user was not deleted and then exits. If the answer to this query is yes, the command deletes the user's entry from the /etc/passwd file and any occurrences of the user from the /etc/group file. It then states that the user was deleted. Searches several administrative directories and files for occurrences of the user and informs you if they exist. If so, it suggests that you may want to delete these occurrences when the command is finished. If no occurrences of the user are found in these directories and files, the command indicates so. Asks if you want to delete the home directory, all subdirectories, and all mail files for the user. If the answer to this query is no, the command indicates that the user's home directory was not deleted and then exits. If the answer to this query is yes, the command continues. As a precaution, the command reminds you that you should have backed up the files for the user before removing them if you do not want to lose them. It then asks if you are sure that you want to delete the files for this user. If the answer to this query is no, the command indicates that the user's home directory was not deleted and then exits. If the answer to this query is yes, the command states that it is removing the user's home directory, its contents and the user's mail file. It then deletes these items. At this point, the command ends. NOTES
Users are advised to migrate to the /usr/sbin/userdel utility or the dxaccounts utility as this command may be removed in a future version of the operating system. EXAMPLES
Enter a login name to be removed or <Return> to exit: john This is the entry for (john) in the /etc/passwd file: john:VSh6/xbMqPDcY:5006:15:sdf:/usr/users/john: Is this the entry you want to delete (y/n)? y Working ... Entry for (john) removed. Searching relevant directories and files for (john) ... None found. Do you want to remove the home directory, all subdirectories, files, and mail for (john) (y/n)? y The files for (john) will be lost if not backed up. Are you sure you want to remove these files (y/n)? y Deleting /usr/users/john Deleting /usr/spool/mail/john FILES
Specifies the command path Group file Password file SEE ALSO
Commands: addgroup(8), adduser(8), dxaccounts(8), finger(1), mkpasswd(8), passwd(1), useradd(8), userdel(8), vipw(8) Files: group(4), passwd(4) removeuser(8)
All times are GMT -4. The time now is 02:27 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy