how to enable auditing for all users?
The poster wanted Informix auditing turned on for all users so he could find out who (especially unknown VB applications) was connecting to his database; he had set up a _default mask but saw no activity in the audit log beyond dbaccess users. One reply suggested auditing the OPDB (and DRDB/CRDB/RNDB) events, but noted auditing probably won't identify such users. Jonathan Leffler recommended auditing the STSN (start session) event, placing it in the _require mask with nothing in _exclude, which may also show connection origin depending on platform/version, and suggested alternatives such as disabling network connections or changing port numbers to see who complains. No confirmation from the poster is recorded.
Auto-generated by DrWatson from the posts below — may be imperfect; read the full thread.
hi i am having some applications, i dont know who are all accessing the databases. if turn on the auditing, the persons who are accessing must be logged in a log file ? how to do it? i know how to create a user mask? but here if turn on the auditing all users logging activies should be logged? how to do it regards
calyanram@hotmail.com said: > hi > > i am having some applications, i dont know who are all accessing the > databases. > if turn on the auditing, the persons who are accessing must be logged > in > a log file ? how to do it? > > i know how to create a user mask? but here if turn on the auditing all > users > logging activies should be logged? how to do it Audit the OPDB (and possibly DRDB, CRDB and RNDB) event(s). -- Bye now, Obnoxio "... no bill is required as no value was provided." -- Christine Normile -- This message has been scanned for viruses and dangerous content by OpenProtect(http://www.openprotect.com), and is believed to be clean.
see enabling audting all users means i have already created one user mask _default , i want to see all user activties but it is not appearing in log file. how to turn on for all users. not for single user.
calyanram@hotmail.com said: > see > enabling audting all users means > > i have already created one user mask _default , i want to see all user > activties Let's start again. What do you want to audit for all users? Do you want to audit all activities, or what? > but it is not appearing in log file. > > how to turn on for all users. not for single user. > > _______________________________________________ > Informix-list mailing list > Informix-list@iiug.org > http://www.iiug.org/mailman/listinfo/informix-list > > -- > This message has been scanned for viruses and > dangerous content by OpenProtect(http://www.openprotect.com), and is > believed to be clean. > -- Bye now, Obnoxio "... no bill is required as no value was provided." -- Christine Normile -- This message has been scanned for viruses and dangerous content by OpenProtect(http://www.openprotect.com), and is believed to be clean.
clearly i will tell,
there are some external apps accessing my db. ok
i am able to see the audit activities for the users who are
internally using the db, that is using dbaccess.
but some VB apps, even nobody knows who are using it.accessing
this db.
how to find those users?
clearly i will tell,
there are some external apps accessing my db. ok
i am able to see the audit activities for the users who are
internally using the db, that is using dbaccess.
but some VB apps, even nobody knows who are using it.accessing
this db.
how to find those users?
calyanram@hotmail.com said:
> clearly i will tell,
>
> there are some external apps accessing my db. ok
>
> i am able to see the audit activities for the users who are
> internally using the db, that is using dbaccess.
>
> but some VB apps, even nobody knows who are using it.accessing
> this db.
>
> how to find those users?
Auditing is very unlikely to tell you this.
--
Bye now,
Obnoxio
"... no bill is required as no value was provided."
-- Christine Normile
--
This message has been scanned for viruses and
dangerous content by OpenProtect(http://www.openprotect.com), and is
believed to be clean.
calyanram@hotmail.com wrote:
> clearly i will tell,
It is generally a good idea to explain what your problem is, and in
moderate detail. Including platform and version number information
helps. See also: http://www.catb.org/~esr/faqs/smart-questions.html
> there are some external apps accessing my db. ok
>
> i am able to see the audit activities for the users who are
> internally using the db, that is using dbaccess.
>
> but some VB apps, even nobody knows who are using it.accessing
> this db.
>
> how to find those users?
Well, this is not always as easy as you'd like. However, the obvious
choice is to audit STSN - start session. So, ensure you have nothing in
your _exclude mask; add STSN to your _default or _require mask (I
suggest _require). Enable auditing.
This should tell you who is starting the sessions. Depending on your
system, it might tell you where the connection is coming from - that's
why platform and version information can be significant.
Another way to deal with this is to disable all network connections to
the database server - and then see who complains. Those connecting
locally (over shared memory or olipcstr or equivalent) won't be
affected; those connecting remotely will. Alternatively again, you
could consider changing port numbers for your approved users; the
non-approved users will have to work harder after you do so.
--
Jonathan Leffler #include <disclaimer.h>
Email: jleffler@earthlink.net, jleffler@us.ibm.com
Guardian of DBD::Informix v2005.02 -- http://dbi.perl.org/