10-07-2015
OS level audit trail for SSH?
Hi everyone,
I have a situation where I need my personal account (say bob1) to login into a Red Hat 6 server, su to a system/application account (say app1) and kick off a script to do x,y and z. This isn't an issue.
Now once I su- to the app1 account and kick-off the script this script then logs into various hosts using various system accounts. For example app1 logs into app2, app3 and app4 on 3 different hosts and starts executing remote commands.
So my question is does the Linux o/s have an inbuilt tracking/logging mechanism somewhere that would show all these activities against the original personal account bob1 who started the whole change (I believe yes but not sure where to look for this) OR once app1 jumps to app2 logging is lost even if I am logged in on a personal account?
Thanks in advance!
10 More Discussions You Might Find Interesting
1. UNIX for Advanced & Expert Users
Dear Experts,
I would like to know whether there are any tools available to view the Security Audit Trail files (SAT) in UNIX in a easier and customized way. If there is any similar type of S/W is available, please let me know.
Thanks,
Aswin (1 Reply)
Discussion started by: na100006
1 Replies
2. Shell Programming and Scripting
Hi,
I'm automatically FTPing few files daily as a cron job to a remote server.
I wanted to know if there is a way to log the successful transfer in a log on the remote server?
The log on the remote server should look something like this.
10/30/2006 00:00:02 - File 1 transferred... (0 Replies)
Discussion started by: dayanand
0 Replies
3. UNIX for Dummies Questions & Answers
I am trying to set up audit trail for our company server. (Mac OS X Server 10.3.9) We would like to record the activity of standard, non-administrative, users. We would like to record file creation, modification, deletion, among other things. We have installed the common criteria tools, but the... (3 Replies)
Discussion started by: iarnum
3 Replies
4. UNIX for Advanced & Expert Users
hi need you advise...
in my company, we have to use mgmt server in order to access to other servers. so basically we need to login to our mgmt server (solaris) before we ssh to any other servers.
my boss ask me to do some reporting on who access some "specific servers" by weekly. any idea how... (4 Replies)
Discussion started by: ashterix
4 Replies
5. Solaris
what are the major Difference Between run level & init level (2 Replies)
Discussion started by: rajaramrnb
2 Replies
6. AIX
Dear All
When I start the AIX(6100-06)audit subsystem.
the log will save in /audit/stream.out (or /audit/trail), but in default when /audit/stream.out to grow up to 150MB.
It will replace the original /audit/stream.out (or /audit/trail).
Then the /audit/stream.out become empty and... (2 Replies)
Discussion started by: nnnnnnine
2 Replies
7. Solaris
Hi everyone,
how i can configure a single audit service in the global zone for all zones, on solaris BSM.
I will be glad to hear back from you.
Thanks and Regards (3 Replies)
Discussion started by: ladondo
3 Replies
8. Red Hat
We have a RHEL 5.8 server at the production level and we have a Java application on this server. I know of the SSL certificate generation at the OS (RHEL) level but it is implemented on the Java application by our development team using the Java keytool. My doubt is that is the SSL generation can... (3 Replies)
Discussion started by: RHCE
3 Replies
9. News, Links, Events and Announcements
Wine is a project that allow user to run windows apps on linux os.
It does that by reimplementation of the windows api.
However Oracle claim that API are copyrightable able and sue google for reimplementation of Java api.
If they win, then wine project will be in the same problem.
... (0 Replies)
Discussion started by: programAngel
0 Replies
10. Shell Programming and Scripting
Hi,
Im going to use shell script for load the data into DB.
First i need to read the trail file(csv file has two columns with comma separated ) like file name trail1024(last 4 digitsMMDD).
In this trail file 27 entries will have like below,I need to read first csv file name and get the 4... (1 Reply)
Discussion started by: krajasekhar.v
1 Replies
LEARN ABOUT FREEBSD
logins
LOGINS(1) BSD General Commands Manual LOGINS(1)
NAME
logins -- display account information
SYNOPSIS
logins [-admopstux] [-g groups] [-l logins]
DESCRIPTION
The logins utility displays information about user and system accounts.
The following options are available:
-a Display information about the password change and account expiration times for each account.
-d Select accounts with duplicate UIDs.
-g groups Select accounts that are members of the specified groups. If multiple group names are specified, they must be separated with com-
mas.
-l logins Select accounts matching the specified login names. If multiple names are specified, they must be separated with commas.
-m Show information about secondary groups.
-o Display the information for each account on a single line of colon-separated fields.
-p Select accounts with no password.
-s Select system accounts. These are currently defined as accounts with UIDs below 1000, plus the ``nobody'' account (UID 65534).
-t Sort selected accounts by name rather than by UID.
-u Select user accounts. These are currently defined as accounts with UIDs above 1000, except the ``nobody'' account (UID 65534).
-x Display information about each account's home directory and shell.
If multiple selection options are specified, all accounts matching any of the selection criteria will be displayed.
If no selection options are specified, all accounts will be displayed.
SEE ALSO
getgrent(3), getpwent(3), group(5), passwd(5), pw(8)
HISTORY
The logins utility appeared in FreeBSD 4.10.
AUTHORS
The logins utility was written by Dag-Erling Smorgrav <des@FreeBSD.org> based on similar utilities in other operating systems.
BSD
March 6, 2004 BSD