RBAC logging


 
Thread Tools Search this Thread
Top Forums UNIX for Advanced & Expert Users RBAC logging
# 1  
Old 02-15-2006
RBAC logging

Hi gurus:
I have not come accross any links on the internet that shows how to set up logging in RBAC and also is it possible to get the granularity and simplicity of sudo logging in RBAC. I have heard that RBAC logs are complicated to read and not as simple and granular as sudo logs.

Your help is appreciated.

Regards,

GR
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Linux

Syslog not logging successful logging while unlocking server's console

When unlocking a Linux server's console there's no event indicating successful logging Is there a way I can fix this ? I have the following in my rsyslog.conf auth.info /var/log/secure authpriv.info /var/log/secure (1 Reply)
Discussion started by: walterthered
1 Replies

2. AIX

Disable RBAC - AIX

Hi all, i have a little problem... I have a Trusted AIX v. 6.1 installed on my system p. I can't disable RBAC mode... $ lsattr -El sys0 -a enhanced_RBAC enhanced_RBAC true Enhanced RBAC Mode True $ chdev -l sys0 -a enhanced_RBAC=false Method error (/usr/lib/methods/chggen): 0514-018... (3 Replies)
Discussion started by: Zio Bill
3 Replies

3. Solaris

RBAC & Logging

I'm trying to set up RBAC, and I need to know where the logs for RBAC are. I'm using Solaris 10 as my OS. I've been reading a lot of documents online and just can't seem to find where the related logs are. My problem is I need to be able to track a user when they su to a role profile, and... (2 Replies)
Discussion started by: bitlord
2 Replies

4. HP-UX

RBAC question

hi every one i tried rbac and i made 1- role called GizaRoot 2- group called gizagroup 3- added privlage autherization called "m.k" /usr/sbin/useradd:dflt:(m.k,*):0/0//:dflt:dflt:dflt: i assigned the role to group and add user to that group then su to user and tried to use the command ... (0 Replies)
Discussion started by: maxim42
0 Replies

5. Solaris

rbac problem.

Hi all! On backup server with contab my script worked, but one command don't fine to be executed: bash-3.00$ scp itadmin@172.17.0.44:/export/backups/* /bckp1/opencms/bcp_`date +%Y%m%d`/ www-zone.cfg 100%... (0 Replies)
Discussion started by: sotich82
0 Replies

6. UNIX for Dummies Questions & Answers

Unix Rbac

Can anyone help me on "How to change Unix to support RBAC policy"? (4 Replies)
Discussion started by: JPoroo
4 Replies

7. AIX

RBAC in 5.3 Question

I would like to use the Role Based access control to granulize some of the administration of AIX systems in our organization. Across the company we will be using aix 5.3. One of these roles will only have the access to make, change and delete users, something similar to ManageAllUsers. The thing... (1 Reply)
Discussion started by: dgaixsysadm
1 Replies

8. Shell Programming and Scripting

Automating RBAC with IF/Then statement

what would be easier to automate a script if/then ? (0 Replies)
Discussion started by: deaconf19
0 Replies

9. Solaris

RBAC Help

do i have to create a new account to add a role? i want the sysadmin login i have 3 users on my systems sysadmin secman oc01 also 3 profiles SA (goes t0 sysadmin account) SSO (goes to secman account) LMICS (goes to oc01 account) the user accounts are located in /h/USERS/local the... (4 Replies)
Discussion started by: deaconf19
4 Replies

10. Solaris

Rbac

I am trying to let user asillitoe su to the godbrook role to execute commands. I have editted files as follows: user_attr: asillito::::type=normal;roles=godbrook godbrook::::type=role;profiles=Gadbrook,All prof_attr: Gadbrook:::Allow root commands to be used by godbrook: exec_attr:... (0 Replies)
Discussion started by: chrisdberry
0 Replies
Login or Register to Ask a Question
sctelemetry(1M) 					  System Administration Commands					   sctelemetry(1M)

NAME
sctelemetry - initialize system resource monitoring SYNOPSIS
sctelemetry -d sctelemetry -e sctelemetry -i -o hasp_rg=rg,hasp_rs=rs [,hasp_mnt_pt=mnt_pt] [,db_rg=rg] [,db_rs=rs] [,telemetry_rg=rg] [,telemetry_rs=rs] sctelemetry -i -o hasp_mnt_pt=mnt_pt,hasp_nodelist=node[:...] [,hasp_rs=rs] [,db_rg=rg] [,db_rs=rs] [,telemetry_rg=rg,telemetry_rs=rs] sctelemetry -u DESCRIPTION
Note - Beginning with the Sun Cluster 3.2 release, Sun Cluster software includes an object-oriented command set. Although Sun Cluster software still supports the original command set, Sun Cluster procedural documentation uses only the object-oriented command set. For more infor- mation about the object-oriented command set, see the Intro(1CL) man page. The sctelemetry command initializes system resource monitoring, brings monitoring online, and takes it offline. When initializing, use the -o option with the hasp_rg=rg,hasp_rs=rs parameters to rely on an existing resource of type SUNW.HAStoragePlus. Use the -o option with the hasp_mnt_pt=mnt_pt,hasp_nodelist=node[:,...]parameters to have the sctelemetry command create a resource of type SUNW.HAStoragePlus. For more information about the resource types, see the SUNW.derby(5), SUNW.HAStoragePlus(5), and SUNW.SCTelemetry(5) man pages. SUNW.SCTelemetry is instantiated in a multi-master resource group, that is the resource group is configured on all cluster nodes and does not use network load balancing. You can use this command only in the global zone. OPTIONS
The options for sctelemetry are as follows: -d Disables the collection of system resource usage data and the database in which telemetry data is stored. You can use this option only in the global zone. Users other than superuser require solaris.cluster.system.modify RBAC authorization to use the -d option of sctelemetry. For more information, see the rbac(5) man page. -e Brings collection of system resource usage data online. By default, system resource monitoring is online when you use the -i option of the sctelemetry command. You can use this option only in the global zone. Users other than superuser require solaris.cluster.system.modify RBAC authorization to use the -e option of sctelemetry. For more information, see the rbac(5) man page. -i Creates resource groups containing resources of type SUNW.SCTelemetry and SUNW.derby. By default, when you create these resources and resource groups by using the -i option, system resource monitoring is online. You can use this option only in the global zone. Users other than superuser require solaris.cluster.system.modify RBAC authorization to use the -i option of sctelemetry. For more information, see the rbac(5) man page. -o hasp_rg=rg,hasp_rs=rs[,hasp_mnt_pt=mnt_pt][,db_rg=rg][,db_rs=rs][,telemetry_rg=rg][ ,telemetry_rs=rs] When used with the -i option, identifies the resource of type SUNW.HAStoragePlus to be used by the database and the resource group that contains this resource. The data collection facility must have access to a file system for SUNW.HAStoragePlus. The parameters are as follows: hasp_rg=rg The resource group that contains the resource of type SUNW.HAStoragePlus that is used for system resource monitoring. You must specify rg, the name of this resource group. hasp_rs=rs The resource of type SUNW.HAStoragePlus that is used for system resource monitoring. You must specify rs, the name of this resource. hasp_mnt_pt=mnt_pt The mount point on which sctelemetry stores database files for system resource monitoring. This mount point must be a property of the resource, hasp_rs. Specifying this mount point is obligatory if there is more than one mount point in hasp_rs. db_rg=rg The resource group in which sctelemetry configures the resource of type SUNW.derby. You can specify rg, the name of this resource group. db_rs=rs The resource of type SUNW.derby that sctelemetry configures. You can specify rs, the name of this resource. telemetry_rg=rg The resource group in which sctelemetry configures a resource of type SUNW.SCTelemetry. You can specify rg, the name of this resource group. telemetry_rs=rs The resource of type SUNW.SCTelemetry that sctelemetry configures. You can specify rs, the name of this resource. -o hasp_mnt_pt=mnt_pt,hasp_nodelist=node[:...][,hasp_rs=rs][,db_rg=rg][,db_rs=rs][,telemetry_rs=rs] When used with the -i option, specifies the nodes on which the SUNW.HAStoragePlus file system for data collection is accessible and specifies the mount point for the file system in which Sun Cluster stores system resource data. The parameters are as follows: hasp_mnt_pt=mnt_pt The mount point that sctelemetry uses to configure a resource of type SUNW.HAStoragePlus. You must specify mnt_pt, the name of the mount point. The shared storage must be configured before the HAStoragePlus resource to be created. This mount point refers to the shared storage and must appear in /etc/vfstab as follows: /dev/md/ddg/dsk/d20 /dev/md/ddg/rdsk/d20 /mntpt ufs 2 no logging hasp_nodelist=node[:...] The nodes with which sctelemetry configures a resource of type SUNW.HAStoragePlus. You must specify node:[...], the name of the nodes. hasp_rs=rs The resource of type SUNW.HAStoragePlus that sctelemetry configures. You can specify rs, the name of this resource. db_rg=rg The resource group in which sctelemetry configures a resource of type SUNW.derby. You can specify rg, the name of this resource group. db_rs=rs The resource of type SUNW.derby that sctelemetry configures. You can specify rs, the name of this resource. telemetry_rg=rg The resource group in which sctelemetry configures a resource of type SUNW.SCTelemetry. You can specify rg, the name of this resource group. telemetry_rs=rs The resource of type SUNW.SCTelemetry that sctelemetry configures. You can specify rs, the name of this resource. -u Removes the resources and resource groups that were previously created by using the -i option. You can use this option only in the global zone. Users other than superuser require solaris.cluster.system.modify RBAC authorization to use the -u option of the sctelemetry command. For more information, see the rbac(5) man page. EXAMPLES
Initializing System-Resource Monitoring, When a HAStoragePlus Resource Exists This example initializes system-resource monitoring and verifies that monitoring has been initialized. This example assumes that you have a SUNW.HAStoragePlus resource available for system-resource monitoring. This example does not specify the names of the resources db_rs and telemetry_rs or the resource groups db_rg and telemetry_rg. The sctelemetry command gives these resources and resource groups default names. The output of the scstat -g command shows the relationship between resources and resource groups involved in system resource monitoring. The output also shows that the db_rs and hasp_rs resources and the db_rg resource group are each online on one node, the telemetry_rg and telemetry_rs are online on all cluster nodes. # sctelemetry -i -o hasp_mnt_pt=DBDATA,hasp_nodelist=l6-lx-1:l6-lx-4,hasp_rs=anto # scstat -g Disabling System-Resource Monitoring This example disables system-resource monitoring then verifies that the monitoring has been disabled. When monitoring is disabled, the out- put of the scstat -g command shows that the db_rs, hasp_rs, and telemetry_rs resources and the db_rg and telemetry_rg resource groups are offline. # sctelemetry -d # scstat -g EXIT STATUS
The following exit values are returned: 0 The command completed successfully. nonzero An error has occurred. ATTRIBUTES
See attributes(5) for descriptions of the following attributes: +-----------------------------+-----------------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +-----------------------------+-----------------------------+ |Availability |SUNWsczu | +-----------------------------+-----------------------------+ |Interface Stability |Evolving | +-----------------------------+-----------------------------+ SEE ALSO
Intro(1CL), cltelemetryattribute(1CL), cluster(1CL), scstat(1M), sctelemetry(1M), SUNW.derby(5), SUNW.HAStoragePlus(5), SUNW.SCTelemetry(5) Sun Cluster 3.2 18 Jul 2006 sctelemetry(1M)