RBAC logging

10 More Discussions You Might Find Interesting

1. Linux

Syslog not logging successful logging while unlocking server's console

When unlocking a Linux server's console there's no event indicating successful logging Is there a way I can fix this ? I have the following in my rsyslog.conf auth.info /var/log/secure authpriv.info /var/log/secure

2. AIX

Disable RBAC - AIX

Hi all, i have a little problem... I have a Trusted AIX v. 6.1 installed on my system p. I can't disable RBAC mode... $ lsattr -El sys0 -a enhanced_RBAC enhanced_RBAC true Enhanced RBAC Mode True $ chdev -l sys0 -a enhanced_RBAC=false Method error (/usr/lib/methods/chggen): 0514-018...

3. Solaris

RBAC & Logging

I'm trying to set up RBAC, and I need to know where the logs for RBAC are. I'm using Solaris 10 as my OS. I've been reading a lot of documents online and just can't seem to find where the related logs are. My problem is I need to be able to track a user when they su to a role profile, and...

4. HP-UX

RBAC question

hi every one i tried rbac and i made 1- role called GizaRoot 2- group called gizagroup 3- added privlage autherization called "m.k" /usr/sbin/useradd:dflt:(m.k,*):0/0//:dflt:dflt:dflt: i assigned the role to group and add user to that group then su to user and tried to use the command ...

5. Solaris

rbac problem.

Hi all! On backup server with contab my script worked, but one command don't fine to be executed: bash-3.00$ scp itadmin@172.17.0.44:/export/backups/* /bckp1/opencms/bcp_`date +%Y%m%d`/ www-zone.cfg 100%...

6. UNIX for Dummies Questions & Answers

Unix Rbac

Can anyone help me on "How to change Unix to support RBAC policy"?

7. AIX

RBAC in 5.3 Question

I would like to use the Role Based access control to granulize some of the administration of AIX systems in our organization. Across the company we will be using aix 5.3. One of these roles will only have the access to make, change and delete users, something similar to ManageAllUsers. The thing...

8. Shell Programming and Scripting

Automating RBAC with IF/Then statement

what would be easier to automate a script if/then ?

9. Solaris

RBAC Help

do i have to create a new account to add a role? i want the sysadmin login i have 3 users on my systems sysadmin secman oc01 also 3 profiles SA (goes t0 sysadmin account) SSO (goes to secman account) LMICS (goes to oc01 account) the user accounts are located in /h/USERS/local the...

10. Solaris

Rbac

I am trying to let user asillitoe su to the godbrook role to execute commands. I have editted files as follows: user_attr: asillito::::type=normal;roles=godbrook godbrook::::type=role;profiles=Gadbrook,All prof_attr: Gadbrook:::Allow root commands to be used by godbrook: exec_attr:...

LEARN ABOUT OSX

heimdal_debug

heimdal_debug(5)					      BSD File Formats Manual						  heimdal_debug(5)

NAME

     heimdal_debug -- how to turn on/off debugging for Kerberos tools

DESCRIPTION

     The heimdal_debug kerberos frameworks have several knobs for controlling logging.	The different framework knobs are:

     libkrb
	  The Kerberos library, some gss-api Kerberos output ends up here too

     kcm  the kcm library (credentials cache, ntlm client)

     kdc  the kerberos KDC output

     digest-service
	  the digest service (ntlm server)

CONFIGURATION FILE

	  [logging]
		  <subsystem> = 0-/SYSLOG:
     and watch syslog for logging information.

APPLE MAC OS X

     First turn up syslog debugging
	   sudo syslog -c 0 -d
     then you can see the syslog output in Console.app or by running
	   syslog -w -k org.h5l.asl
     To enable more extensive debugging logging for each subsystem, use the following commands:

	   Kerberos Library
		sudo defaults write /Library/Preferences/com.apple.Kerberos logging -dict-add krb5 '0-/ASL:'

	   digest-server
		sudo defaults write /Library/Preferences/com.apple.Kerberos logging -dict-add digest-service '0-/ASL:'

	   kcm	sudo defaults write /Library/Preferences/com.apple.Kerberos logging -dict-add kcm '0-/ASL:'

	   kdc	sudo defaults write /Library/Preferences/com.apple.Kerberos logging -dict-add kdc '0-/ASL:'

	   MIT Kerberos Shim
		defaults write com.apple.MITKerberosShim EnableDebugging -bool true

	   GSS-API framework logging
		sudo defaults write /Library/Preferences/com.apple.GSS DebugLevel -int 10

Other options on Mac OS X
	  Make the admin API pretend to the server even on client
	       sudo defaults write /Library/Preferences/com.apple.Kerberos ForceHeimODServerMode -bool true

SEE ALSO

     gss(5), kerberos(8)

HEIMDAL 
							   Sep 30, 2011 							   HEIMDAL

UNIX for Advanced & Expert Users