SUMMARY: Login auditing (unresolved)

From: Adametz, Bluejay (bluejay@fujigreenwood.com)
Date: Thu Aug 22 2002 - 07:20:55 EDT


Some of y'all may be wondering what became of this problem, so I'm posting a
summary even though the issue is not resolved.

I opened a call with ComHPaq, which has been escalated to engineering. The
initial person handling the call indicated that it may be a "problem" (which
I take to mean "bug").

Original question is below.

                                                - Bluejay Adametz

Definition: Pajamble n. The condition of waking up with your pajamas turned
180 degrees.

> I've been fiddling with the auditing configuration on my
> servers, and what I
> think I want to do is *not* audit successful logins and
> logouts, *except*
> for specific users (e.g. root). I figured I could do this by
> configuring the
> system-wide auditing to only audit login & logout failures,
> and enable login
> and logout audits (success and failure) for the particular user(s).
>
> It looks like I have things set up right, but I only get the
> logout audits.
> For example, I have this account on a test machine (set up by
> dxaccounts):
>
> backups:u_name=backups:u_id#200:u_pwd=xxxxxxxxxxxxx:u_auditmas
> k=login\:1\:1,
> logout\:1\:1:\
>
> :u_succhg#1026910165:u_oldcrypt#0:u_suclog#1028890908:u_suctty
> =INET#hawk:\
>
> :u_unsuctty=INET#hawk:u_unsuclog#1028815916:u_lock@:u_unlock#1800:\
> :chkent:
>
> But I get no login audit. Only the logout.



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:48:50 EDT