Auditing not started in 7.31.UD1
Posted in 2007
Topics: Server Administration, Security, Permissions & Auditing
Hi!
Why isn't auditing activated, when starting the database server whit
oninit, with the following settings in ONCONFIG?
ADTMODE 1 # Auditing mode
ADTPATH /tmp # Directory where audit trails will be
written by OnLine
ADTSIZE 50000 # Maximum size of any single audit
trail file
ADTERR 0 # Error handling modes.
Informix@S0241337> onaudit -c
Onaudit -- Audit Subsystem Configuration Utility
Copyright (C) Informix Software, Inc., 1996
Current audit system configuration:
ADTMODE = 0
ADTERR = 0
ADTPATH = /tmp
ADTSIZE = 50000
Audit file = 0
Informix@S0241337> which onaudit
/opt/informix/ids/7.31.UD1/bin/onaudit
Informix@S0241337> onstat
-
Informix Dynamic Server Version 7.31.UD1 -- On-Line -- Up 00:00:30
-- 282912 Kbytes
I'm able to start auditing whith 'onaudit -l 1'
Informix@S0241337> onaudit -l 1
Onaudit -- Audit Subsystem Configuration Utility
Copyright (C) Informix Software, Inc., 1996
Informix@S0241337> onaudit -c
Onaudit -- Audit Subsystem Configuration Utility
Copyright (C) Informix Software, Inc., 1996
Current audit system configuration:
ADTMODE = 1
ADTERR = 0
ADTPATH = /tmp
ADTSIZE = 50000
Audit file = 0
Informix@S0241337> uname -a
SunOS S0241337 5.9 Generic_118558-34 sun4u sparc SUNW,Sun-Fire-V240
Regards Christian Eriksson
Hi Christian .
Try the following.
onaudit -a -u _default -e +ACTBselect * from customer (choose stores demo) via dbaccess.
onshowaudit -l
--
Tsutomu Ogiwara from Tokyo Japan.
>From: christianeriksson@vfemail.net
>To: informix-list@iiug.org
>Subject: Auditing not started in 7.31.UD1
>Date: 24 Apr 2007 06:18:43 -0700
>
>Hi!
>
>Why isn't auditing activated, when starting the database server whit
>oninit, with the following settings in ONCONFIG?
>
>ADTMODE 1 # Auditing mode
>ADTPATH /tmp # Directory where audit trails will be
>written by OnLine
>ADTSIZE 50000 # Maximum size of any single audit
>trail file
>ADTERR 0 # Error handling modes.
>
>Informix@S0241337> onaudit -c
>Onaudit -- Audit Subsystem Configuration Utility
> Copyright (C) Informix Software, Inc., 1996
>
>
>Current audit system configuration:
> ADTMODE = 0
> ADTERR = 0
> ADTPATH = /tmp
> ADTSIZE = 50000
> Audit file = 0
>Informix@S0241337> which onaudit
>/opt/informix/ids/7.31.UD1/bin/onaudit
>
>Informix@S0241337> onstat
>-
>
>Informix Dynamic Server Version 7.31.UD1 -- On-Line -- Up 00:00:30
>-- 282912 Kbytes
>
>I'm able to start auditing whith 'onaudit -l 1'
>
>Informix@S0241337> onaudit -l 1
>Onaudit -- Audit Subsystem Configuration Utility
> Copyright (C) Informix Software, Inc., 1996
>
>
>Informix@S0241337> onaudit -c
>Onaudit -- Audit Subsystem Configuration Utility
> Copyright (C) Informix Software, Inc., 1996
>
>
>Current audit system configuration:
> ADTMODE = 1
> ADTERR = 0
> ADTPATH = /tmp
> ADTSIZE = 50000
> Audit file = 0
>
>Informix@S0241337> uname -a
>SunOS S0241337 5.9 Generic_118558-34 sun4u sparc SUNW,Sun-Fire-V240
>
>Regards Christian Eriksson
>
>_______________________________________________
>Informix-list mailing list
>Informix-list@iiug.org
>http://www.iiug.org/mailman/listinfo/informix-list
_________________________________________________________________
懐かしのTVドラマ特集が追加!Gメン'75、太陽にほえろ!、ふぞろいの林檎たち他
http://livesushi.jp/
christianeriksson@vfemail.net wrote:
> Why isn't auditing activated, when starting the database server whit
> oninit, with the following settings in ONCONFIG?
>
> ADTMODE 1 # Auditing mode
> ADTPATH /tmp # Directory where audit trails will be written by OnLine
> ADTSIZE 50000 # Maximum size of any single audit trail file
> ADTERR 0 # Error handling modes.
Because the audit settings are controlled by $INFORMIXDIR/aaodir/adtcfg.
> Informix@S0241337> onaudit -c
> Onaudit -- Audit Subsystem Configuration Utility
> Copyright (C) Informix Software, Inc., 1996
>
>
> Current audit system configuration:
> ADTMODE = 0
> ADTERR = 0
> ADTPATH = /tmp
> ADTSIZE = 50000
> Audit file = 0
That's the info in adtcfg. Now, beware: if you modify the settings for
server number 17, then IDS will write a file
$INFORMIXDIR/aaodir/adtcfg.17. However, it will not read that file on
start-up; it will continue to read adtcfg (no suffix). So, you have to
copy the changes from adtcfg.17 to adtcfg (or, equivalently, copy
adtcfg.17 over adtcfg). If you are running multiple IDS servers out of
a single INFORMIXDIR with different auditing configurations, you have to
finagle the system by copying the correct adtcfg.NN over adtcfg before
starting server number NN.
Finally, note that the default audit log location is /tmp and that is
about as atrocious a choice as possible. If it must go under /tmp, at
least create a sub-directory with owner informix, group AAOGRP (probably
informix, but whichever group owns $INFORMIXDIR/aaodir), and 770
permissions.
> Informix@S0241337> which onaudit
> /opt/informix/ids/7.31.UD1/bin/onaudit
>
> Informix@S0241337> onstat
> -
>
> Informix Dynamic Server Version 7.31.UD1 -- On-Line -- Up 00:00:30
> -- 282912 Kbytes
>
> I'm able to start auditing whith 'onaudit -l 1'
>
> Informix@S0241337> onaudit -l 1
> Onaudit -- Audit Subsystem Configuration Utility
> Copyright (C) Informix Software, Inc., 1996
>
>
> Informix@S0241337> onaudit -c
> Onaudit -- Audit Subsystem Configuration Utility
> Copyright (C) Informix Software, Inc., 1996
>
>
> Current audit system configuration:
> ADTMODE = 1
> ADTERR = 0
> ADTPATH = /tmp
> ADTSIZE = 50000
> Audit file = 0
>
> Informix@S0241337> uname -a
> SunOS S0241337 5.9 Generic_118558-34 sun4u sparc SUNW,Sun-Fire-V240
>
> Regards Christian Eriksson
>
--
Jonathan Leffler #include <disclaimer.h>
Email: jleffler@earthlink.net, jleffler@us.ibm.com
Guardian of DBD::Informix v2007.0226 -- http://dbi.perl.org/