User Logging

Thread Tools Search this Thread
Top Forums Shell Programming and Scripting User Logging
# 8  
Old 02-03-2014
Originally Posted by @dagio
If you want multiple users to use the same account, but also have logs to see which IPexecuted each command is possible.
But if multiple people are logging in as root it is trivial for them to destroy this system, too.
# 9  
Old 02-03-2014
Originally Posted by Corona688
But if multiple people are logging in as root it is trivial for them to destroy this system, too.
Totally agree,but this can be done for every user,not only root.
Generally i think is usefull to have it specially in environments where many users uses the same account to login to the server, i know is not safe, but happened a lot, specially in test systems.
# 10  
Old 02-04-2014
In a Financial Services company, we would be taken to court if we cannot prove who did what where. Basically, that translates that everyone must use a personal normal account. We have groups that can perform security actions and these are highly monitored and anyone requiring root access has a sudo rule for the particular command and logs are generated and monitored by a separate team for auditing.

Huge overhead, but very necessary when the values of money in question are huge and the requirements of Data Protection are high to protect customers. There's no easy way around it, but if you give root access too easily, then someone can remove any restrictions and cover their tracks very easily.

Imagine someone adding a service that they could use as a back-door where the normal protections cease to apply, or setting up at or cron jobs to perform actions that they won't be traced to.

Keep root to (at most) three people in a single team, and then only in an emergency. Have root login restricted to the console only and limit who can access the console.

Like Corona688 says, if you give out root, you've lost all control and therefore the integrity of your server.

# 11  
Old 02-04-2014
Originally Posted by @dagio
Generally i think is usefull to have it specially in environments where many users uses the same account to login to the server, i know is not safe, but happened a lot, specially in test systems.
Well, sorry to inform you but you are wrong.

I have worked in many test, development and production environments in both big and small companies.

Never, one time, did any company permit a single login for multiple users. Never.

It is a violation of most company policies to do this and any company or system admin who would permit this is in the wrong job; as it is a basic, very basic, duty of a system admin to insure that there is one login per person, and an audit trait for each user; especially if the users have superuser privileges.

If a sys admin worked for me that insisted on a single login for multiple users, I would simply fire them immediately.

I'm going to close this thread, because we have already advised the OP on what he should do and why he should do it; and it's best we set an example of what are "best practices" and "acceptable practices" versus supporting bad ideas which are against policy at most companies.
These 2 Users Gave Thanks to Neo For This Post:
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Linux

Syslog not logging successful logging while unlocking server's console

When unlocking a Linux server's console there's no event indicating successful logging Is there a way I can fix this ? I have the following in my rsyslog.conf /var/log/secure /var/log/secure (1 Reply)
Discussion started by: walterthered
1 Replies

2. UNIX for Dummies Questions & Answers

User account logging

Hi - I want to log commands typed by oraapps user with time into some log file on runtime. HISTTIMEFORMAT="%d/%m/%y %T " works but any one with oraapps user can delete the history. OS : RHEl 5.6 Any help is appreciated. (5 Replies)
Discussion started by: oraclermanpt
5 Replies

3. UNIX for Advanced & Expert Users

Logging User Sessions

Hello, I am using a Linux server (Ubuntu 11.04 Server) to host some files and a code repository. Because we are using ssh + svn to connect to the repository, our users have normal ssh access. What I would like to do is log their user sessions so that I have an audit trail in the event that... (2 Replies)
Discussion started by: chrisb1609
2 Replies

4. UNIX for Dummies Questions & Answers

How to avoid logging with root user?

I have created a linux machine and installed some softwares on it with root user privileges . I used to login with root user credentials for doing the various task. Later i have realise that this is not the best practice to follow and there should be a new user with less privileges to be created... (1 Reply)
Discussion started by: pinga123
1 Replies

5. Post Here to Contact Site Administrators and Moderators

Constant Logging In (After Logging Out)

Hi Everyone. First, I want to thank all of you for letting me participate in this great group. I am having a bit of a problem. After I get an email from a responder, I login to make my reply. In the mean time I get another response by email from another member, I go to reply to them and I... (6 Replies)
Discussion started by: Ccccc
6 Replies

6. AIX

Logging user logins

I want to know how I can turn off and turn on login logging. We have a server that appears to have stopped logging user logins. Running the who command shows nothing and the last command shows no logins for a month. The var/adm/wtmp file isn't full and there is plenty of space in the var file... (2 Replies)
Discussion started by: daveisme
2 Replies

7. UNIX for Dummies Questions & Answers

Possibility of logging into linux machine when the user does not exist locally

Hi, I am trying authenticate ssh users login using third party server (radius) instead of local system authentication. I have modified my /etc/pam.d/sshd with required server auth configuration and able to authenticate user using radius server and the user is able to ssh into this linux... (2 Replies)
Discussion started by: dhandapanik
2 Replies

8. HP-UX

Issue with user logging in to HP UX Server

Hi, I wonder if anyone is able to assist me. I have a HP UX server and some HP UX workstations that has been migrated from another network. I have changed the IP Addresses and everything seems to be working fine. However, the users are complaining that they are unable to login to the UX... (1 Reply)
Discussion started by: michaelgim
1 Replies

9. Solaris

Tracing a user and logging his actions

Dear All, I want to enable the tracing for a user and logging all things he do in a log file.......... Thaaanks (2 Replies)
Discussion started by: adel8483
2 Replies

10. UNIX for Advanced & Expert Users

User logging log

Hi, Does anybody knows is there a way or how to records user logging record? thanks in advance (4 Replies)
Discussion started by: jennifer
4 Replies
Login or Register to Ask a Question