RBAC logging

10 More Discussions You Might Find Interesting

1. Linux

Syslog not logging successful logging while unlocking server's console

When unlocking a Linux server's console there's no event indicating successful logging Is there a way I can fix this ? I have the following in my rsyslog.conf auth.info /var/log/secure authpriv.info /var/log/secure

2. AIX

Disable RBAC - AIX

Hi all, i have a little problem... I have a Trusted AIX v. 6.1 installed on my system p. I can't disable RBAC mode... $ lsattr -El sys0 -a enhanced_RBAC enhanced_RBAC true Enhanced RBAC Mode True $ chdev -l sys0 -a enhanced_RBAC=false Method error (/usr/lib/methods/chggen): 0514-018...

3. Solaris

RBAC & Logging

I'm trying to set up RBAC, and I need to know where the logs for RBAC are. I'm using Solaris 10 as my OS. I've been reading a lot of documents online and just can't seem to find where the related logs are. My problem is I need to be able to track a user when they su to a role profile, and...

4. HP-UX

RBAC question

hi every one i tried rbac and i made 1- role called GizaRoot 2- group called gizagroup 3- added privlage autherization called "m.k" /usr/sbin/useradd:dflt:(m.k,*):0/0//:dflt:dflt:dflt: i assigned the role to group and add user to that group then su to user and tried to use the command ...

5. Solaris

rbac problem.

Hi all! On backup server with contab my script worked, but one command don't fine to be executed: bash-3.00$ scp itadmin@172.17.0.44:/export/backups/* /bckp1/opencms/bcp_`date +%Y%m%d`/ www-zone.cfg 100%...

6. UNIX for Dummies Questions & Answers

Unix Rbac

Can anyone help me on "How to change Unix to support RBAC policy"?

7. AIX

RBAC in 5.3 Question

I would like to use the Role Based access control to granulize some of the administration of AIX systems in our organization. Across the company we will be using aix 5.3. One of these roles will only have the access to make, change and delete users, something similar to ManageAllUsers. The thing...

8. Shell Programming and Scripting

Automating RBAC with IF/Then statement

what would be easier to automate a script if/then ?

9. Solaris

RBAC Help

do i have to create a new account to add a role? i want the sysadmin login i have 3 users on my systems sysadmin secman oc01 also 3 profiles SA (goes t0 sysadmin account) SSO (goes to secman account) LMICS (goes to oc01 account) the user accounts are located in /h/USERS/local the...

10. Solaris

Rbac

I am trying to let user asillitoe su to the godbrook role to execute commands. I have editted files as follows: user_attr: asillito::::type=normal;roles=godbrook godbrook::::type=role;profiles=Gadbrook,All prof_attr: Gadbrook:::Allow root commands to be used by godbrook: exec_attr:...

LEARN ABOUT HPUX

rbacdbchk

rbacdbchk(1M)															     rbacdbchk(1M)

NAME

       rbacdbchk - Verifies the syntax of the Role-Based Access Control (RBAC) database files

SYNOPSIS

DESCRIPTION

       verifies that there are no conflicting or inconsistent entries in and amongst the RBAC database files.  also checks the syntax of the data-
       base files and prints messages indicating which lines contain errors.  returns zero output if no errors are present in the database files.

       All the RBAC database files and are verified.  See rbac(5) for more information on these RBAC database files.

   Options
       supports the following options:

	      Checks the
		     database.

	      Checks the
		     database.

	      Checks the
		     database.

	      Checks the
		     database.

	      Checks the
		     database.

	      Cross reference checks all databases.

EXTERNAL INFLUENCES

   Environment Variables
       determines the language in which messages are displayed.

   International Code Set Support
       Single-byte character code set is supported.

RETURN VALUE

       0.   Success
       1.   Incorrect syntax

EXAMPLES

       The following example finds an error that user is an invalid user

	      # rbacdbchk
	      [/etc/rbac/user_role] John: Administrator
		      invalid user
		      The value 'John' for the Username field is bad.

       The following example finds a syntax error, an extra colon at the end of a line:

	      # rbacdbchk
	      [/etc/rbac/user_role] root:     Administrator:
		      invalid name: Not alphanumeric
		      The value 'Administrator:' for the Rolename field is bad.

	      [Role in role_auth DB with no assigned user in user_role DB]
	      Administrator:(hpux.*, *)

       The following example finds a field missing:

	      # rbacdbchk
	      [/etc/rbac/roles] : my comment
		      invalid name: <empty>
		      The value '' for the Rolename field is bad.

       The following example finds a bad role:

	      # rbacdbchk

	      [Role in role_auth DB with no assigned user in user_role DB]
	      blah:(hpux.*, *)

	      [Invalid Role in role_auth DB. Role 'blah' does not exist in the roles DB]
	      blah:(hpux.*, *)

       The following example finds a bad group name:

	      # rbacdbchk
	      [/etc/rbac/user_role] &blah:    Administrator
		      invalid group
		      The value 'blah' for the Group name field is bad.

FILES

       Database containing valid definitions of all roles.

       Database containing definitions of all valid authorizations.

       Database specifying the roles for each specified user.

       Database that defines the authorizations for each role.

       Database containing the authorization to execute specified commands,
	      and the privileges to alter uid and gid for command execution.

       Database that defines the role-to-authorization to audit

SEE ALSO

       authadm(1M), cmdprivadm(1M), privrun(1M), rbac(5).

																     rbacdbchk(1M)

UNIX for Advanced & Expert Users