Oninit cdi / Archive
Talk to an expert →

db auditing

Posted in 2006

Topics: High Availability & Replication, Security, Permissions & Auditing

ROBERT ROUSSEY — — source: IIUG Forums & Mailing Lists

It would be very helpful if the following was *not* true as our security manager asks me to look into starting auditing/trusted facility on our production servers: In high-availability data replication (HDR), only the primary database server performs secure auditing and produces an audit trail. The onaudit utility runs on the secondary database server but does not audit any of the audit events. Bob Roussey Spirit Airlines robert.roussey@spiritair.com

↪ replying to ROBERT ROUSSEY
Obnoxio The Clown — — source: IIUG Forums & Mailing Lists

ROBERT ROUSSEY said: > > It would be very helpful if the following was *not* true as our security > manager asks me to look into starting auditing/trusted facility on our > production servers: > > In high-availability data replication (HDR), only the primary database > server > performs secure auditing and produces an audit trail. The onaudit utility > runs > on the secondary database server but does not audit any of the audit > events. I'm confused ... what would happen on the secondary that hadn't already happened already on the primary? -- Bye now, Obnoxio "... no bill is required as no value was provided." -- Christine Normile

↪ replying to Obnoxio The Clown
Robert Roussey\\\\(MIS\\\\) — — source: IIUG Forums & Mailing Lists

Users or developers using logins on the HDR secondary (even with the read-only access) querying sensitive customer information. "I need to login to production to research this problem....." Bob Roussey Unix / Informix Administration Spirit Airlines Robert.Roussey@SpiritAir.com -----Original Message----- From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of Obnoxio The.... Sent: Tuesday, July 18, 2006 1:36 PM To: ids@iiug.org Subject: Re: db auditing [7120] ROBERT ROUSSEY said: > > It would be very helpful if the following was *not* true as our security > manager asks me to look into starting auditing/trusted facility on our > production servers: > > In high-availability data replication (HDR), only the primary database > server > performs secure auditing and produces an audit trail. The onaudit utility > runs > on the secondary database server but does not audit any of the audit > events. I'm confused ... what would happen on the secondary that hadn't already happened already on the primary? -- Bye now, Obnoxio "... no bill is required as no value was provided." -- Christine Normile ************************************************************************ ******* Forum Note: Use "Reply" to post a response in the discussion forum.

Glossary