How do you log SAP vendor activity performed during an OSS Connection?

Hello Everyone,
What is the best and cost effective way to log SAP vendor activity while they are connected to perform OSS related work?
The environment under review provides an OSS SAP support ID and password to the vendor to facilitate the authentication, however, no security audit logging is performed. The SAP team is raising performance issues as the reason why the logging is not turned on.
Is there a way to restrict the security logging only to the OSS support ID and also determine the activity performed during the session? Basically, how can the internal team know that an unauthorized activity was performed during the connection and / or someone made several failed attempts to authenticate through the OSS connection?
Thank you.

It also records the GUI event and is regardless of the success of starting the activity, let alone completing it.
In my books it is "fluffy" security which is inherently flawed for the purpose you are using it for. The main reason for the records is response times.
It only works because authorization concepts are sometimes inherently flawed in their implementation as well.... so people believe what they see...
But for forensics it is usefull IF you are fast enough...
Cheers,
Julius

Similar Messages

  • How do you log values from RT target to the computer?

    Hi,
    I am using sbRIO 9633. How do you log values from RT target to the computer?
    I created a shared variable on the RT target and used them on the log VI created under "My Computer", but I get error.
    I get this error..
     \\192.168.1.140\temp deployment failed (error: -1967357949, IAK_SHARED:  (Hex 0x8ABC8003) Unable to query Measurement & Automation Explorer for the Shared Variable Engine. Make sure the Shared Variable Engine exists on the RT target and check that the network connection is valid.).
    kdm

    What are your data rates?  If you are producing data "continuously", you might find that Network Streams are easier and more reliable than Network Shared Variables.  In any case, you need an "engine" on one side (Host or Target) or the other.  I'm streaming 24 channels of 16-bit data from a PXI controller to a PC this way, with three other streams handling two-way messaging and transmission of "occasional" time-stamped data to the PC.
    Bob Schor

  • How do you log into Facetime after already logging in?

    How do you log into Facetime for 2nd time? I have 2 iPad 2's and trying to get them to connect to same Wi-Fi and at times different Wi-Fi. However on the 2nd iPad i logged into Facetime using same itune account info, i have since setup 2nd itune account & can not figure out how to log in using a different account info.

    You log into and out of accounts in Settings/FaceTime.
    You can contact devices logged into the same Apple ID as long as they are configured with different email addresses.

  • How do you log out of the twitter app?

    how do you log out of the twitter app on a apple imac

    I can't see an obvious log out function but Twitter menu > Preferences > Accounts and you can remove the account.  It's only entering the username and password to log back in. 
    mrtotes

  • How do you log out of yahoo mail on ipad ?

    How do you log out from Yahoo Mail on a Ipad?

    Using the mail app? You don't. THe ipad was created to be a single user device so there's no support for locking down any single part of it.
    If you have your mail and want to keep it from other users, your best bet is to access yahoo via safari where you can log in and log out. You still get your mail access but it can be locked out as well.

  • How do you log out?

    How do you log out of a forum? Is it at all possible?
    Seems I am logged in to any forum I go to if I switch between different ones, even ones I never previously used to be a member of. So am I now a member of all existing forums just because I logged in?
    I've actually been a member of several Adobe forums since 2002, but today they all consider me a new member who only joined today and gave me a screenname I  haven't used for quite some time. Not funny.

    Curt Wrigley wrote:
    Kath-H wrote:
    Chronological discussions are not confusing in the slightest. It couldn't be simpler to clarify what you are replying to if necessary.
    Actually, it could be a lot simpler.  The system could add who you are replying to automatically.
    But; if it isnt obvious to you; Im not going to be able to convince you.
    Curt, please listen to me. First off, pointing out that some new features do not seem to be an improvement doesn't put me in dinosaur territory.
    Second, even if we added an extra 'feature' of telling me who is being replied to, that doesn't tell me what they said. To know that I'd have to start jumping back and forth. If I don't even realise that an apparent non sequitur is because a person is replying to something a couple of pages back - because they are using threaded view - that's a recipe for confusion.
    Before, if we needed to reply to a post some way back, we'd swipe through the relevant text - as more than one post was visible when replying, another new annoyance - add a greater than symbol, paste and carry on.
    How do you think people will react if they've never been here before, have no clue about what threaded/flat views even are?
    I don't particularly like threaded view, partly because of the ever-shrinking width, but I'd live with it if everyone used it.
    If I insisted on living in the past I'd still be using Pagemaker or Quark and Pagemill - but you don't have to lose your critical faculties every time someone waves something new and shiny in front of your eyes.

  • How do you log out of the FB chat on the FB app on iPad 2?

    As the title says, how do you log out of the Facebook chat on the Facebook application on IPad 2 without having to shut down the entire application?

    Anybody?

  • How do you log out of email on ipod touch 4th generation

    how do you log out of email on ipod touch 4th generation?

    Email for what? You can log out of the your Apple ID by going to Settings>iTunes and App Store and tap the signed-in ID and then tap on log out.

  • How do you get your ipod to get out of the "connect to itunes screen"?

    How do you get your ipod to get out of the "connect to itunes screen"?

    Connect the iPod to your computer and restore via iTunes.
    iTunes 10 for Windows: Update and restore software on iPod, iPhone, or iPad

  • How do you use passbook? Finally got the app to connect to App Store. Does not seem to allow me to add anything.

    How do you use passbook? Finally got the app to connect to App Store. Does not seem to allow me to add anything.

    http://support.apple.com/kb/HT5483
    Use this

  • How do you in xcode search devices in bluetooth and stablish connection other devices with iphone or ipad

    hi everyone
    how do you in xcode search devices in bluetooth and stablish connection other devices whit iphone or ipad ?
    the all answer is good
    and the source is enable for all

    Bluetooth on iOS has three different functions:
    o user level features -- For example, headsets.  There is no developer opportunity here (well, you can play audio that comes out the headset, but you know what I mean :-).
    o networking -- You can establish a PAN network to other iPhone OS devices with GameKit (going away)  or Bonjour.
    o accessories -- All Bluetooth accessory developers must go through the Made for iPod program.  Once you have an MFI device you can then talk to it through ExternalAccessory framework.
    <http://developer.apple.com/ipod/>

  • How do you retrieve a password when your Ipod say's connect to ITunes, but when you go on ITunes it says to unlock password?

    How do you retrieve a password when your Ipod say's connect to ITunes, but when you go on ITunes it says to unlock password?

    You will need to do this:
    iOS: Unable to update or restore

  • Why use P2 technology - how do you log?

    Can anyone explain to me why they use P2 technology? When we shoot our DVCAM footage, we log in FCP on a Powerbook, we mark all the good takes, then digitize based on what we've already seen. We don't need to re-log everything in the edit suite, we just start cutting with known good footage. Scene numbers, take numbers are already entered, and we're ready to go.
    With P2, you record your footage, wait 8-10 minutes to copy the files to your laptop, then import the clips, with no markings; you don't know what the good takes are, you don't have any scene or take references, or useful in or out points. These all need to be added in FCP or P2 Log. You have to review all of the footage you've shot again, decide if the take is good or not (which can be fun if you've had 7 or 8 takes and it turns out take 5 was the 'good' one). This strikes me as an incredible waste of time, something we don't have the luxury of with ever shrinking budgets. I expect you have to keep some kind of paper log, (welcome to the 1980's) with an unpredictable file naming system, so that you know what you have when you're ready to post.
    So is this really a good solution? Yes, you don't have to digitize. But you do have to log everything, which is very simple as you shoot in FCP, but you can't merge the P2 footage with a log kept in P2 Log or in FCP. Which brings me to my question: Can you create a log for P2 footage as you shoot, that can be brought into FCP without having to review the footage again or do a lot of post production typing?
    To me, this is the Achilles heel of P2 production. Anyone have any thoughts? We don't shoot a frame without a scene number and tape number, we shoot 50 good shots a day from about 150 takes per day, and at about 60 days a year, we need to keep track of what we shoot as we go. I estimate at least a 1/2 day of logging for every day of shooting with the P2, and frankly, I don't have 30 working days in my year to create logs that I can easily make while we shoot.
    P2, on the surface, looks great. But P2 and any direct to disk technology, to me, looks like a big step backwards in terms of workflow.
    Fire away, folks.
    MacBook Pro   Mac OS X (10.4.8)   Non-linear since 1994

    As the editor of the productions I work on, I am never on set. And I and the producer prefer it that way. This way I come in with an objective point of view, does the shot work or not. I am not clouded by how much time and effort went into getting the shot, I just look at it afterwards and judge it by its value. So we never log on the set. We simply back up.
    When we shoot our DVCAM footage, we log in FCP on a Powerbook, we mark all the good takes, then digitize based on what we've already seen. We don't need to re-log everything in the edit suite, we just start cutting with known good footage. Scene numbers, take numbers are already entered, and we're ready to go.
    You do all this work on the set. We don't, we do it in post, so there isn't twice the amount of work...it is just done later. This is true of every production I have worked on...documentary, narrative TV, short film. We aren't in the field logging and capturing...that is done later. But it is still done. We also slate our footage, and if someone is on the set to do so, they act as Script Supervisor and mark the good and bad takes. So when I look at the footage in the P2 import window on FCP 5.1.2, I can take the good but not the bad. But...I am always in favor of getting everything, because even though a take might be bad, it might contain something good that I can use.
    With P2, you record your footage, wait 8-10 minutes to copy the files to your laptop, then import the clips, with no markings; you don't know what the good takes are, you don't have any scene or take references, or useful in or out points. These all need to be added in FCP or P2 Log. You have to review all of the footage you've shot again,
    Again, we slate in the field. Yes, the clips come in with odd names, but when you capture a tape there is no INSTANT name associated with that. You have to give it a name...as you import. You can do the same with FCP and P2, as you import give it a name, scene, take...mark it good. And again, we aren't reviewing the footage AGAIN...it is done for the first time in post. They may review it in the field with the P2 viewer to ensure it looks good, just like on any film production with a DVCAM deck recording thru the camera viewfinder or rewinding the camera tapes.
    So is this really a good solution?
    Works rather well for me. No problems whatsoever...except when I first started doing this and put ALL the imported P2 clips into one bin. 2000 clips. I'll never make that mistake again. I separate footage by card much like I make Dailies bins with tapes.
    http://lfhd.blogspot.com/2007/01/organizing-my-p2-media.html
    But you do have to log everything, which is very simple as you shoot in FCP,
    You said that you log everything...in the field. I am logging everything in post. Still have to log. And, how do you "shoot in FCP?" That is a non-linear edit, not a camera. What do you mean by this? I guess I don't get how you are logging in the field without having to log. You are still taking the time to log and name the footage...so you lost me here.
    Can you create a log for P2 footage as you shoot, that can be brought into FCP without having to review the footage again or do a lot of post production typing?
    Not that I know of. Achilles heel? I suppose if you look at it from the point of view of your current workflow. But you have to realize that it ISN'T your typical tape workflow. Stop trying to make it work like a tape workflow. Square peg in circular hole. Same thing happened when people switched from Film to Tape...the workflows they were accustomed to didn't work...they had to devise new ones.
    You are going to have to figure out a new way of doing things...or just not shoot with the HVX. It is a very different way of doing things, but production can be pretty slick if you work out a system. I have a system and it works great. If you don't like it, don't use it. Grab an HDV camera and struggle with THAT format.
    P2, on the surface, looks great. But P2 and any direct to disk technology, to me, looks like a big step backwards in terms of workflow.
    Tell that to David Fincher's crew on ZODIAK. Not one tape or scrap of film in that production...all digital.
    If the tapeless workflow doesn't work for you...don't use it. Easy decision.
    Click on Underdog for my experiences with the format. Start from the beginning and see how I progressed if you'd like.
    Shane

  • Smb: how do you log access & disconnect users?

    I've always relied on AFP for file sharing, but since it seems like that's kind of on the way out and SMB is the new way to do things, I've been trying that out instead. A few questions though...
    Where are the access logs? I'm looking for the equivalent of the AppleFileServiceAccess.log that I see in the Console, that shows timestamps with IPs for opening & deleting files, etc. (Maybe logging has to be enabled with some seperate step that's not in the Server app GUI, or the log isn't called something obvious?)
    How do you force a user to disconnect? (Remote users sometimes drop connections, so they're really not connected anymore but the server still shows the connection. For AFP users, I can use the Disconnect button to remove these ghosts, but when I try to use that button on an SMB connection I just get a message saying it only works for AFP. So... do the ghosts just pile up and you're supposed to ignore them, or do you have to restart the server, etc.?)

    This is exactly what i was looking for, and Nelson is correct.  When you enter the DAP configuration for a profile click on "Advanced" and there is the option to create a logical expression.  The guide (ther is a button to access this) is really helpful, with a couple of examples.  This is what i used:
    assert(function()
       if ( (type(aaa.ldap.distinguishedName) == "string") and
            (string.find(aaa.ldap.distinguishedName, "OU=Users") ~= nil) )
    then
           return true
       end
       return false
    end)()
    from the debug dap you can see what Users relates to;
    DAP_TRACE: Username: MyUsername, aaa.ldap.distinguishedName = CN=Mr B,OU=Users,OU=Site ******,DC=CH,DC=Mycompany,DC=com
    My admin account fails to get me in to the same profile:
    DAP_TRACE: dap_add_to_lua_tree:aaa["ldap"]["distinguishedName"]="CN=Admin Mr B,OU=Admin Users,OU=Site *****,DC=CH,DC=Mycompany,DC=com"
    Thanks
    Andrew

  • How do you log?

    hi
    I'm starting to learn some logging techniques (log4j, java.util.logging), but i'm dissapointed their capabilites. (or more probably i do not know sth)
    Using standard java.util.logging package on enterprise application server I found out, that LogManager is global for all projects deployed on server (which is really annoying because I want every application log to another file).
    And i would like to use external logging.properties files to convenient store every properties.
    Is here some easy solution, or you would suggest use log4j (some people was encoured me to use thistool, because of his capabilites)
    AND how you log your exceptions?
    Edited by: gregory_33 on Mar 12, 2008 4:24 PM

    big thanks for response!.
    Now i see that java logger `java.util.logging.` sucks.
    I want every application log to another file).
    And i would like to use external logging.properties files to convenient store every properties.task above is impossible to do, because LogManager is global for all JVM.
    Unfortunetly it is not sole defect of java.util.logging package ....
    Today i'm starting to use Log4j ;) (topic to close)
    Edited by: gregory_33 on Mar 13, 2008 12:23 AM

Maybe you are looking for

  • How to save stage as png interactively?

    Hi, Does anybody know how to save/export the stage as an image like in this example? http://ciruelo.jp/js/edge/tde.html Any help would be appreciated, thanks so much!

  • Bridge CC not wanting to update from CC desktop app?

    the Photoshop CC and InDesign CC apps both updated fine

  • Time Machine makes full backup after permission repair.

    I am struggling with this a couple of months but now I am sure. Each time I do a permission repair of my hard drive, Time Machine makes a full backup of roughly 200G. In this way my Time Machine disk can be full rather quickly. I seem not to be able

  • Install or update?

    If I already have a CS6 program installed on my computer, should I select "update" or "install" from the CC download options?

  • Increase SGA Size

    HI, EBS- 12.0.6 DB- 10.2.0.3 I found this in the ADDM Report --- FINDING 1: 100% impact (18551 seconds) The SGA was inadequately sized, causing additional I/O or hard parses. RECOMMENDATION 1: DB Configuration, 100% benefit (18551 seconds) ACTION: In