Oblix audit logs to track last login time in Sun DS
Hi,
I would like to use oblix audit logs to track last login time in Sun DS.
Is there a straightforward procedure to do that other than parsing the logs and using custom script to update Sun DS.
Please advice.
Thanks.
Hi,
In OAM you can define your own plugins to run during the authentication (you include them in the relevant authentication schemes) - you could write one that updates the user profile of the logged-in user. You would be pretty much on your own, though, all that OAM would give you is the DN of the logged in user. You would need to include libraries that connect to ldap (or maybe the plugin could send a web service call) and perform the necessary attribute updates. Authn plugins are documented in the Developer Guide: http://docs.oracle.com/cd/E15217_01/doc.1014/e12491/authnapi.htm#BABDABCG (actually that's for 10.1.4.3).
Regards,
Colin
Similar Messages
-
Re: check last login time
Dear all,
How to check the last login time in Sun Solaris 8. Any command or file that records it?
Thanks,
JoeHave a look at the man page for last?
-
How to track the login time and logout times of clients
hai
please give me the solution
suppose there are 5 systems connected in LAN.
how to track the login time and logout times of clients
for a given time(may be one day or 1 hour) using any programming language.
please give me the solutionWhen the client logs in you write the client's ID and the current time to a database. Likewise when the client logs out. Assuming of course that you have a program that knows when those events occur.
-
I'm trying to use DS6 built-in functionality for tracking user's last login time. I created a new password policy and enabled pwdKeepLastAuthTime attribute. Then I tried signing into Access Manager.
According to the documentation, an attribute pwdLastAuthTime should be added to the user entry, but it is not there.
Any ideas how I can get this to work?Last login time is a feature provided with the new Directory Server password policy implementation introduced in DS 6 and is not part of the compatibility mode. Check the Directory Server password policy compatibility mode:
$ dsconf get-server-prop ... | grep 'pwd-compat'
pwd-compat-mode : DS5-compatible-mode
The Directory Server password policy compatibility mode must be advanced past DS5-compatible-mode:
$ ldapmodify ...
dn: cn=Password Policy,cn=config
changetype:modify
replace:pwdkeeplastauthtime
pwdkeeplastauthtime:TRUE
modifying entry cn=Password Policy,cn=config
ldap_modify: DSA is unwilling to perform
ldap_modify: additional info: (Password Policy: modify policy entry) "pwdKeepLastAuthTime: TRUE" is not supported in server mode DS5-compatible-mode ("cn=config" pwdCompat: 0).
$ dsconf pwd-compat ... to-DS6-migration-mode
$ dsconf get-server-prop ... | grep 'pwd-compat'
pwd-compat-mode : DS6-migration-mode
Now it should work. If not, please try binding directly to the directory server as the user (e.g., do an ldapsearch as that user) and check the entry. -
LDAP attribute for user's last login time?
Hi all,
Is there an LDAP attribute that I could return (via an "ldapsearch" query) that would contain the user's last login time?
We have:
Directory Server Version: 5.2_Patch_2 ; Build number: 2004.107.0034
other...
Identity Server 2004Q2
sparc-sun-solaris2.9
Thanks in advance!Hello,
If you need this info, you will have to create a password policy that log last logon time.
But be carefull with this function, it can create a lot of cpu load.
<http://docs.sun.com/app/docs/doc/820-4809/fhkrj?l=en&n=1&a=view>
Regards
Eric. -
Hi Friends,
I wanted to know the name of dictionary view which keep the user login details iee. login date and time. I want to check that what was the last login time of user. So that if user has not logged in since 30 days then his acccount must be locked.
Plz let me know if someone has any idea on this
Regards
AlokHi Guys
Thanks for your response. Let me more clear you what i m looking for.
I have 100s of developers working with me. I keep on maintaining data which user is being used by whom. I am using product/project based username. I want to achieve the following.
1) Find the users those are not using their login since X nos of days ie. to know who all are in use. Objective of this to know if any developer has swiched or quite from project.
2)I will lock those account and notify those owner that account has been locked considering that they are not using.
3)now these accounts can be allocated to some other developers on need basis.
This will give me flaxibility of using my existing resource and better management.
I hope i m clear with what all i need.
Please suggest best way to do this :)
Thanks a lot.
Alok -
Sunone Messaging Server 6.1--How to list all mail user's last login time
hi,i want to know how to list all the mail user's last login time.
There are more than 100000 mailbox accounts on our mail server,
i want to know which account is not used for more than 2 or 3 years.
thanks.http://wikis.sun.com/display/CommSuite/imsconnutil
Somchai. -
Is there a way to audit user accounts by last login date/time?
Hello all,
Is there a way to see or report on a user's last login. I don't see a last login date parameter in the UM record. I see that all security events are logged in the security log including logon and logoff, but what I need is to be able to produce a report that provides all user accounts which have not been logged on to since a specified date or # of days, i.e. since 01/01/2008 or >180 days.
Any clues or guidance is appreciated.
Regards,
PaulIs there a SAP / Portal standard way of accessing this information?
Our authorisations team have asked me to get them such a report, and I can't find anything on the portal (NW2004) that would give this information. I don't think the basis guys would be terribly chuffed to provide access directly to the database. If this (database access) is the only way, then I suppose a custom developed app could be created and deployed to the portal, but I would have thought this is a reasonalby sensible report so would be standard content somewhere.
Cheers,
Andrew -
Security audit log for the last 30 days?
Hi,
My current settings for the security audit log is 20 MB (by default). I dont want to control it with file size limitation, but by the no. of days the audit is recorded (max 30 days).
What are the parameters that I would need to maintain?
Or any additinal config is required?
Thanks,
AbdulHi,
My current configuration is like this:
Name Description Current value System default value
FN_AUDIT Name of security audit file audit_++++++++
DIR_AUDIT Directory for security audit files /usr/sap/GSP/DVEBMGS00/log /usr/sap/GSP/D00/log
rsau/enable Enable Security Audit 0
rsau/max_diskspace/local Maximum space for security audit file 300M 20M
rsau/max_diskspace/per_day Maximum size of all security audit files per day 0
rsau/max_diskspace/per_file Maximum size of one single security audit file 0
rsau/selection_slots Number of selection slots for security audit 2
rsau/user_selection Defines the user selection method used inside kernel functions 0
I have just activated the audit, and in just 30 minutes, I can see that the file is about 45MB. If this is the growth rate, the 300MB allocated for audit will completely used in just a day.
My requirement is - I want to track users and their activities for the last 30 days (or 45 days). No log should be overwritten unless it is atleast 30 days old.
In SM20, when I give selection from 1.1.10 to 31.1.10, it should show me all the activities during this period, without any breaks.
Other doubts: Do I have to start auditing manually every day? Or will it keep writing logs until it reaches 300 MB which can spread upto multiple days.
Regards
Abdul
Edited by: Abdul Rahim Shaik on Feb 4, 2010 11:17 AM -
Portal Acitivty report to track Last login date of user
Hi,
We need a report which shows the last logins of Users in Portal. We checked the Portal Activity Report but it is showing only First login. But we need the Last login how can I configure the Portal Activity report.
Thanks
Naveen.Hi All,
Just in case Activity Collector or Portal Activity Report is not sufficient for you and your portal management to gather important usage data, you may be interested in our SAP certified solution, Click Stream.
May make your life a lot easier when finding the usage stats you need (Easy installation u2013 Free download u2013 Fully functional test version available).
More information here:
Website: [www.sweetlets.com/clickstream|http://www.sweetlets.com/clickstream]
EcoHub reviews: [http://ecohub.sdn.sap.com/irj/ecohub/solutions/clickstream|http://ecohub.sdn.sap.com/irj/ecohub/solutions/clickstream]
Good luck and hope that helped. -
<p>Trying to create a report which would include the last logintime of each user. I can see that value is being stored somewherebecause when you select users in EAS it gives you a column 'LastLogin Time'.</p><p> </p><p>Is there any way to have that displayed via maxl?</p><p> </p><p>Thanks,<br>Jacob</p>
The login information being stored in the Application or Essbase Log files. You can query the both logs to extract user information (i.e who logged in, what time, day and type of information etc.) by several ways.<BR><BR>1. 3rd party tool called "LumenSoft"<BR>2. Build Usage cube. You can find the basic information on Essbase.com <BR>3. Write shell script. <BR><BR>I will say option # 2 is a good & long term solution.<BR><BR>Let me know if you need any help to begin. <BR><BR>Thanks,<BR>-Ricky <BR>
-
Getting the last login time of a user
I would like to know, if there is a timestamp of a user when the user last logged in. If not existing, what would be the easiest and safest way to obtain that information.
The purpose of having this information is detecting unused Oracle accounts.
Thanks,
DejanYou can use Oracle auditing and audit the CREATE SESSION privilege. Then you can look in the DBA_AUDIT_TRAIL at the TIMESTAMP column for the use of the CREATE SESSION privilege.
-
Audit Logs which track who download document from WebCenter Content
I have a requirement from user to see who and when documents has been download from WebCenter Content.
Does Oracle WebCenter Content can log "download" event?This very much depends on how you retrieve the document.
Direct URL links (such as http://192.168.44.129:7001/cs/groups/public/documents/document/mdaw/mdaz/~edisp/ucm_003205.xls) cannot be tracked (I think the request is handled only by the web server).
GET_FILE links (such as http://192.168.44.129:7001/cs/idcplg?IdcService=GET_FILE&dID=3805&dDocName=UCM_003205&allowInterrupt=1) can be tracked. -
MDM Last Login History table?
Hello,
I was wondering if anyone was aware if the last date/time login history of a mdm user to a repository is actually stored in one of the DBMS tables for a repository schema. We are aware of the Audit xml log file that tracks actions of when a user logs into a repository - but we are trying to find out if this is already recored in one of the MDM database tables so we can more easily make use of last login time for custom development.
Thanks.Hi David,
You can try out this...... goin the Console client in the system tables check the Login Table. But this you will get records that MDM maintains which corresponds to a currently connected MDM client application, along with the connection time and time since last access, allowing you to monitor connection activity.
Name: The user name.
Host Name: The system on which the MDM client is running.
Application Name: The MDM application (e.g. Client, API, Import Manager).
Connection Time: The date and time the connection was established.
Last Activity Time: The date and time the connection was last accessed.
Hope this helps you ...............
Prasad................ -
How to find the last login details of a Sharepoint SSRS user
How to /where to find the last login details of SSRS sharepoint user. Is there any table where we can check the last login details of user. This is because we are facing an issue of Subscription failure due to Sharepoint token expiration. If user logs in
before 24 hours of his last login time, he is able to get his report subscription. If not, below error is thrown.
The permission granted to user 'domainname\username' are insufficient to perform this operation.Hi,
According to your post, my understanding is that you want to monitor the last login user’s details.
There is no out of the box way to achieve it in SharePoint.
We can use cookie to be a flag for checking whether there is an user just log in. After the page loaded, if the cookie is null, it suggests that there is an user just log in our site, then we
can get this user’s information using JavaScript Object Model and add the information into a custom list. With this list, we can monitor user’s login details.
Refer to the following link:
https://social.technet.microsoft.com/Forums/en-US/0cd4d531-cb61-4d90-aa70-413267f4a735/how-to-know-login-and-logout-details-of-a-user-in-sharepoint-online-2013?forum=sharepointdevelopment
Besides, here are two similar posts for your reference:
https://social.technet.microsoft.com/Forums/sharepoint/en-US/1a35283e-0f2a-49b8-b330-801a3cfcd890/programatically-get-all-current-logged-in-users-list-for-a-sharepoint-site?forum=sharepointdevelopmentprevious
https://social.technet.microsoft.com/Forums/en-US/10953be3-cb1c-40c7-9454-545c8338b551/how-to-know-login-users-count-and-their-details-in-sharepoint-2010-web-application?forum=sharepointgeneralprevious
Best Regards,
Lisa Chen
Lisa Chen
TechNet Community Support
Maybe you are looking for
-
Passing on old 3G to someone else after reset won't work on iTunes
I upgraded from my 3G so I got it unlocked , reset it back to factory settings and sent it to my son In Belgium. I am in Australia. He can't get it to work on his iTunes anyone know what he can do. Thanks. The 3G is just over 2 years old
-
Error while allocating channel
Hi We are trying to backup Oracle 11gr2 database using RMAN. The MML is provided by the vendor and we have linked the library with libobk.so. The server OS is Solaris 10 64 bit on AMD64 architecture. When we try to run backup the RMAN returns with th
-
Interface virtual-template limitations
I am using 7204 as access concentrator for PPPOA sessions using interface virtual-templates. I want to know the maximum number of supported virtual interfaces. for 12.0, it's stated in cco documents that the maximum number of virtual interfaces is 30
-
Is it possible to change the address in the replacement program for the ipod nano 1G?
I 'm already sign up in the replacement program of the ipod nano 6G and the emply box has already been send. But later, I noticed that the address wasn't complet. So my question is if and how I could change my address.
-
SmugMug plugin doesn't work in LR 5.5
When clicking pusblish, comes up with error "ca not create folder in sumgmug" Any hints?