Very Computer

by **Weallans, Malcol** » Wed, 09 Jul 2003 22:45:10

This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C34557.26759FE0
Content-Type: text/plain

I am investigating the use on onaudit. The documentation refers to the
_default, _require, and _exclude masks. Is there any way in which I can
find out what these masks are set to.

In a recent test I removed all user masks and ran the system for a short
period. There was a large amount of information recorded to the audit file,
so I assume that there are many settings in _default but what they are is
the big question.

Any help appreciated as usual

Malcolm

**************************************************************************
The information transmitted herewith is sensitive information intended only
for use by the individual or entity to which it is addressed. If the reader
of this message is not the intended recipient, you are hereby notified that
any review, retransmission, dissemination, distribution, copying or other
use of, or taking of any action in reliance upon this information is
strictly prohibited. If you have received this communication in error,
please contact the sender and delete the material from your computer.

------_=_NextPart_001_01C34557.26759FE0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable

<html>

</head>

I am investigating the use on onaudit.  The
documentation refers to the _default, _require, and _exclude =
masks.  Is
there any way in which I can find out what these masks are set =
to.

In a recent test I removed all user masks and ran =
the system
for a short period.  There was a large amount of information =
recorded to
the audit file, so I assume that there are many settings in _default =
but what
they are is the big question.

Any help appreciated as usual

Malcolm

</div>

</body>

</html>

=
************************************************************************=
** The information transmitted herewith is sensitive =
information intended only for use by the individual or entity to which =
it is addressed. If the reader of this message is not the intended =
recipient, you are hereby notified that any review, retransmission, =
dissemination, distribution, copying or other use of, or taking of any =
action in reliance upon this information is strictly prohibited. If you =
have received this communication in error, please contact the sender =
and delete the material from your computer.

------_=_NextPart_001_01C34557.26759FE0--
sending to informix-list

by **Mark D. Stoc** » Thu, 10 Jul 2003 00:49:28

> I am investigating the use on onaudit. The documentation refers to the
> _default, _require, and _exclude masks. Is there any way in which I can
> find out what these masks are set to.

The template masks are treated like users masks, so you can display them
using:

onaudit -o -u _default

or to display all masks:

onaudit -o

Cheers,
--
Mark.

+----------------------------------------------------------+-----------+

| Mydas Solutions Ltd http://MydasSolutions.com |///// / //|
| +-----------------------------------+//// / ///|
| |We value your comments, which have |/// / ////|
| |been recorded and automatically |// / /////|
| |emailed back to us for our records.|/ ////////|
+----------------------+-----------------------------------+-----------+

sending to informix-list

by **Weallans, Malcol** » Thu, 10 Jul 2003 01:09:46

That doesn't happen here. When I do onaudit -o I get nothing. But if I
create a mask using a role it does display the mask. Reading the manual I
expected to be able to edit the _default, _require, and _exclude templates
but I can't see them.
We are running IDS 9.30.HC4 on HPUX 11
Regards

Malcolm

-----Original Message-----

Sent: 08 July 2003 16:49
To: Weallans, Malcolm

Subject: Re: Onaudit

> I am investigating the use on onaudit. The documentation refers to the
> _default, _require, and _exclude masks. Is there any way in which I can
> find out what these masks are set to.

The template masks are treated like users masks, so you can display them
using:

onaudit -o -u _default

or to display all masks:

onaudit -o

Cheers,
--
Mark.

+----------------------------------------------------------+-----------+

| Mydas Solutions Ltd http://MydasSolutions.com |///// / //|
| +-----------------------------------+//// / ///|
| |We value your comments, which have |/// / ////|
| |been recorded and automatically |// / /////|
| |emailed back to us for our records.|/ ////////|
+----------------------+-----------------------------------+-----------+

**************************************************************************
The information transmitted herewith is sensitive information intended only
for use by the individual or entity to which it is addressed. If the reader
of this message is not the intended recipient, you are hereby notified that
any review, retransmission, dissemination, distribution, copying or other
use of, or taking of any action in reliance upon this information is
strictly prohibited. If you have received this communication in error,
please contact the sender and delete the material from your computer.
sending to informix-list

by **Mark D. Stoc** » Thu, 10 Jul 2003 01:18:49

> That doesn't happen here. When I do onaudit -o I get nothing. But if I
> create a mask using a role it does display the mask. Reading the manual I
> expected to be able to edit the _default, _require, and _exclude templates
> but I can't see them.

Yes, that's right, you should be able to.

Quote:> We are running IDS 9.30.HC4 on HPUX 11

I guess it's time to contact tech support and see if there are any known
issues with that version.

Cheers,
--
Mark.

+----------------------------------------------------------+-----------+

| Mydas Solutions Ltd http://MydasSolutions.com |///// / //|
| +-----------------------------------+//// / ///|
| |We value your comments, which have |/// / ////|
| |been recorded and automatically |// / /////|
| |emailed back to us for our records.|/ ////////|
+----------------------+-----------------------------------+-----------+

sending to informix-list

by **Rajib Sarka** » Thu, 10 Jul 2003 01:35:52

Use onaudit -o -u <username> and it'll print out the audit masks set for
the user. If only _default has been used for the user it'll show the masks
included in the _default template.

On 9.30.FC2 I get the following:

INF9.30.FC2W2-/prods1/9.30.FC2W2/bin> onaudit -o -u rsarkar
Onaudit -- Audit Subsystem Configuration Utility
Copyright (C) Informix Software, Inc., 1997

rsarkar -
FDROP,FDRSN,FRDRW,FGRFR,FSTRL,FONMN,FRNDB,FONPL,FCRDM,FDRRT,FCRDT,FRNIX

Thanx much,

Rajib Sarkar
Advisory Support Engineer (RAS)
IBM Data Management Group
Ph : (602)-217-2100
Fax: (602)-217-2100

As long as you derive inner help and comfort from anything, keep it --
Mahatma Gandhi

"Weallans, Malcolm"

talone.com> cc:
Sent by: Subject: Onaudit

ug.org

07/08/2003 06:45 AM

I am investigating the use on onaudit. The documentation refers to the
_default, _require, and _exclude masks. Is there any way in which I can
find out what these masks are set to.
In a recent test I removed all user masks and ran the system for a short
period. There was a large amount of information recorded to the audit
file, so I assume that there are many settings in _default but what they
are is the big question.
Any help appreciated as usual
Malcolm

**************************************************************************
The information transmitted herewith is sensitive information intended only
for use by the individual or entity to which it is addressed. If the reader
of this message is not the intended recipient, you are hereby notified that
any review, retransmission, dissemination, distribution, copying or other
use of, or taking of any action in reliance upon this information is
strictly prohibited. If you have received this communication in error,
please contact the sender and delete the material from your computer.

sending to informix-list