Prev
Next
Forums Infor / Lawson Platforms S3 Security

Auditing LDAP changes made via loadusers

 2 Replies
 0 Subscribed to this topic
 15 Subscribed to this forum
Sort:
Author
Messages
Ellen Melton
Advanced Member
Posts: 28
Advanced Member
8/19/2008 12:21 PM

    I posted this on Lawson Community as well, but thought I'd try here too.

    Has anyone found a way to capture LDAP changes made via the loadusers utility. We have a nightly scheduled job running under the lawson userid that uses loaduser utility to add new employees to the LDAP for ESS. I am not seeing any of these changes when I look in the Lawson Security Admin Audit Report even though I include lawson user in my report list. I do see all changes made by a given individual via the LS Administrator Tool.

    I have Auditing set to Critical. I believe the changes are captured if you change the setting to debug, but I don't want it to run in debug mode all the time.

    We are LSF 9 running under LAUA security on UNIX.

    Roger French
    Veteran Member
    Posts: 549
    Veteran Member
    9/5/2008 8:19 PM

      There is a flag on one of the ios properties or security cfg files which writes a SSO*.log file to $LAWDIR\system. Sorry I can't remember what it is, but there is a KB article on support which describes it.

       

       

       

      Kwane McNeal
      Veteran Member
      Posts: 479
      Veteran Member
      9/8/2008 1:40 PM
        Uhhh, the SSO*.log files would not track changes. Also, I think there is a confusion between Auditing and Debugging. Debugging will track everything, but you correct, you don't want to enable it all the time. Auditing will only catch utilities told to report back to it. loadusers was coded very poorly, and doesn't report back most events.

        the only sure way to do this is roll your own auditing.

        Feel free to give me a call to discuss.
        Kwane
        954.547.7210