Re: Auditing using "Trusted facilities" to track failed login attempts
--0__=88BBE427DF10E2C78f9e8a93df938690918c88BBE427DF10E2C7 Content-type: multipart/alternative; Boundary="1__=88BBE427DF10E2C78f9e8a93df938690918c88BBE427DF10E2C7" --1__=88BBE427DF10E2C78f9e8a93df938690918c88BBE427DF10E2C7 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: quoted-printable Failed logins are in the online log .. with errors -951 or -952. Thanx much, Rajib Sarkar Advisory Software Engineer DB2/UDB Regional Advanced Support IBM Data Management Group http://www.ibm.com/software/data/db2/udb/winos2unix/support If we all did the things we are capable of doing, we would literally astound ourselves. -- T. Edison = bdscarboro@yahoo. = com (Brian = Scarboro) = To Sent by: informix-list@iiug.org = owner-informix-li = cc st@iiug.org = Subj= ect Auditing using "Trusted faciliti= es" 06/15/2004 02:10 to track failed login attempts = PM = = = Please respond to = bdscarboro = = = Has anyone successfully used the auditing utility to track failed attempts to login to a database? I have set up the required mask and events (using the _require mask and the OPDB event), and gotten things configured and working. However, the utility is only logging successful logins, not failed logins. I am really more interested in knowing when a login attempt fails. Can this auditing facility be set up to provide that information? If not, what are other ideas for generating this kind of data? Thanks much for any pointers! bdscarboro = --1__=88BBE427DF10E2C78f9e8a93df938690918c88BBE427DF10E2C7 Content-type: text/html; charset=US-ASCII Content-Disposition: inline Content-transfer-encoding: quoted-printable <html><body> <p>Failed logins are in the online log .. with errors -951 or -952.<br>= <br> Thanx much,<br> <br> Rajib Sarkar<br> Advisory Software Engineer<br> DB2/UDB Regional Advanced Support<br> IBM Data Management Group<br> <br> <a href=3D"http://www.ibm.com/software/data/db2/udb/winos2unix/support"= >http://www.ibm.com/software/data/db2/udb/winos2unix/support</a><br>; <br> <br> If we all did the things we are capable of doing, we would literally as= tound ourselves. -- T. Edison<br> <br> <img src=3D"cid:10__=3D88BBE427DF10E2C78f9e8a93df938@us.ibm.com" width=3D= "16" height=3D"16" alt=3D"Inactive hide details for bdscarboro@yahoo.co= m (Brian Scarboro)">bdscarboro@yahoo.com (Brian Scarboro)<br> <br> <br> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">= <tr valign=3D"top"><td style=3D"background-image:url(cid:20__=3D88BBE42= 7DF10E2C78f9e8a93df938@us.ibm.com); background-repeat: no-repeat; " wid= th=3D"40%"> <ul> <ul> <ul> <ul><b><font size=3D"2">bdscarboro@yahoo.com (Brian Scarboro)</font></b= ><font size=3D"2"> </font><br> <font size=3D"2">Sent by: owner-informix-list@iiug.org</font> <p><font size=3D"2">06/15/2004 02:10 PM</font> <table border=3D"1"> <tr valign=3D"top"><td width=3D"168" bgcolor=3D"#FFFFFF"><div align=3D"= center"><font size=3D"2">Please respond to<br> bdscarboro</font></div></td></tr> </table> </ul> </ul> </ul> </ul> </td><td width=3D"60%"> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">= <tr valign=3D"top"><td width=3D"1%" valign=3D"middle"><img src=3D"cid:3= 0__=3D88BBE427DF10E2C78f9e8a93df938@us.ibm.com" border=3D"0" height=3D"= 1" width=3D"58" alt=3D""><br> <div align=3D"right"><font size=3D"2">To</font></div></td><td width=3D"= 100%"><img src=3D"cid:30__=3D88BBE427DF10E2C78f9e8a93df938@us.ibm.com" = border=3D"0" height=3D"1" width=3D"1" alt=3D""><br> <font size=3D"2">informix-list@iiug.org</font></td></tr> <tr valign=3D"top"><td width=3D"1%" valign=3D"middle"><img src=3D"cid:3= 0__=3D88BBE427DF10E2C78f9e8a93df938@us.ibm.com" border=3D"0" height=3D"= 1" width=3D"58" alt=3D""><br> <div align=3D"right"><font size=3D"2">cc</font></div></td><td width=3D"= 100%"><img src=3D"cid:30__=3D88BBE427DF10E2C78f9e8a93df938@us.ibm.com" = border=3D"0" height=3D"1" width=3D"1" alt=3D""><br> </td></tr> <tr valign=3D"top"><td width=3D"1%" valign=3D"middle"><img src=3D"cid:3= 0__=3D88BBE427DF10E2C78f9e8a93df938@us.ibm.com" border=3D"0" height=3D"= 1" width=3D"58" alt=3D""><br> <div align=3D"right"><font size=3D"2">Subject</font></div></td><td widt= h=3D"100%"><img src=3D"cid:30__=3D88BBE427DF10E2C78f9e8a93df938@us.ibm.= com" border=3D"0" height=3D"1" width=3D"1" alt=3D""><br> <font size=3D"2">Auditing using "Trusted facilities" to trac= k failed login attempts</font></td></tr> </table> <table border=3D"0" cellspacing=3D"0" cellpadding=3D"0"> <tr valign=3D"top"><td width=3D"58"><img src=3D"cid:30__=3D88BBE427DF10= E2C78f9e8a93df938@us.ibm.com" border=3D"0" height=3D"1" width=3D"1" alt= =3D""></td><td width=3D"336"><img src=3D"cid:30__=3D88BBE427DF10E2C78f9= e8a93df938@us.ibm.com" border=3D"0" height=3D"1" width=3D"1" alt=3D""><= /td></tr> </table> </td></tr> </table> <br> <tt>Has anyone successfully used the auditing utility to track failed<b= r> attempts to login to a database? I have set up the required mask and<br= > events (using the _require mask and the OPDB event), and gotten things<= br> configured and working. However, the utility