Link to home
Start Free TrialLog in
Avatar of ParadiseITS
ParadiseITS

asked on

Solaris 9 CDE Authentication Logging

We have a need to log *ALL* login successes and failures in Solaris 9.

I've been able to get all command line logins to log.. no problemo....  however, no CDE activity logs... I can't seem to find a way to get CDE login successes and failures to write to syslog...



Help?!?!


ASKER CERTIFIED SOLUTION
Avatar of Nukfror
Nukfror
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Avatar of yuzh
yuzh

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of ParadiseITS
ParadiseITS

ASKER

So, to break down the BSM tool...    the document Nukfor sent seems to sum it up... so here is my understanding...  can anyone clarify if I've got it before I try it?


run the audit_startup script
then I can edit (using vi??) the audit_control file to:

dir:/var/audit
minfree:20
flags:lo
naflags:lo


and this will grab all login activity?

My thoughts were to setup a cron job to do the audit -n then archive the resulting logs off the server...  is this a sound plan?  Or am I missing something??

check that.. I meant run the bsmconv.. not audit_startup
I'm going to go ahead and close this, I have it working on my Virtual Machine so it's good enough to close the question -- thanks!