Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

I've discovered a problem with the way AIX uses auditclasses to determine which system calls are audited. If a user is defined in LDAP, their auditclasses attribute is blank. I found an APAR which states, prior to AIX 5.3, the default user stanza in /etc/security/audit/config was applied to users without an auditclasses attribute. However, this no longer seems to be the case in AIX 5.3 or higher.

I know there's a RFC2307AIX schema, which defines this LDAP attribute. However, I'd like to set a local default auditclasses and not have to convince the Active Directory admins to apply a schema extension. Besides, I cannot find a schema extension for eDirectory, which is also used.

Has anyone else seen this problem?

share|improve this question

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.