1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<TITLE> [Mageia-sysadm] ldap write log
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20ldap%20write%20log&In-Reply-To=%3CAANLkTin4iGMg5x%2B4%3DVcAAMxkj4kNOVL%2B-F2MQ%2BpSZue_%40mail.gmail.com%3E">
<META NAME="robots" CONTENT="index,nofollow">
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="001032.html">
<LINK REL="Next" HREF="001071.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[Mageia-sysadm] ldap write log</H1>
<B>Leandro Dorileo</B>
<A HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20ldap%20write%20log&In-Reply-To=%3CAANLkTin4iGMg5x%2B4%3DVcAAMxkj4kNOVL%2B-F2MQ%2BpSZue_%40mail.gmail.com%3E"
TITLE="[Mageia-sysadm] ldap write log">ldorileo at gmail.com
</A><BR>
<I>Mon Dec 6 20:16:47 CET 2010</I>
<P><UL>
<LI>Previous message: <A HREF="001032.html">[Mageia-sysadm] ldap write log
</A></li>
<LI>Next message: <A HREF="001071.html">[Mageia-sysadm] ldap write log
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#1033">[ date ]</a>
<a href="thread.html#1033">[ thread ]</a>
<a href="subject.html#1033">[ subject ]</a>
<a href="author.html#1033">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>Hi Michael
On Mon, Dec 6, 2010 at 3:26 PM, Michael Scherer <<A HREF="https://www.mageia.org/mailman/listinfo/mageia-sysadm">misc at zarb.org</A>> wrote:
><i> Hi,
</I>><i>
</I>><i> while discussing on irc, we came to the conclusion that it would be nice
</I>><i> to get some audit ( by sending mail ) when a user change group, or when
</I>><i> a user is promoted.
</I>><i>
</I>><i> A way to do that would be to use the accesslogs overlay, with a cronjob
</I>><i> to get data from it, and to send them by mail and/or store them too, if
</I>><i> needed.
</I>><i>
</I>><i> What do you think ?
</I>
Seems to work well, there`s even an audit logging overlay that may fit better.
><i>
</I>><i> How long should we keep the log ?
</I>
I understand it depends on security issues, how long is it possible to
break a system by someone with wrong credentials? :)
><i>
</I>><i> Does someone see a problem, or a better idea ?
</I>
As far as I know overlays may be extended or customized, with some
time and manpower it could be possible do write an overlay to directly
send mails instead of parsing longs.
><i>
</I>><i> Obviously, we will need to be careful about what is sent and where, for
</I>><i> privacy reason.
</I>
sure..
--
Leandro Dorileo
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="001032.html">[Mageia-sysadm] ldap write log
</A></li>
<LI>Next message: <A HREF="001071.html">[Mageia-sysadm] ldap write log
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#1033">[ date ]</a>
<a href="thread.html#1033">[ thread ]</a>
<a href="subject.html#1033">[ subject ]</a>
<a href="author.html#1033">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-sysadm">More information about the Mageia-sysadm
mailing list</a><br>
</body></html>
|
