Auditing User administration in AIX 1

[vikramanilrao]

Background:
I a trying to audit user administration on a AIX box. I am trying to make sure that any changes made by the System administrator to the user accounts (Add users, changing their attributes or deleting users) are accompanied by authorization i.e. the system admin does not make any changes w/o a written authorization.

Problem:

I need to ask the system administrator to generate a log report that can capture all changes made to user accounts (Addition of users, chanegs or deletions) so that I can select a sample from that report and ask him to provide me with authorizations. How do I generate such a log report.Also, Auditing might not have been turned on.

 

[hfaix]

I would have your systems administrator turn on AIX "audit" and configure it to monitor user/group changes (only the stuff you want to audit). Don't let him/her convince you it's overhead intensive.... it's not.

I run audit, and am required to report all user and group ( adds, deletes, or changes ). AIX audit seems to be sufficient.

 

[vikramanilrao]

Thanks hfaix for the help. I will definitely keep this in mind.