Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've discovered a problem with the way AIX uses auditclasses to determine which system calls are audited. If a user is defined in LDAP, their auditclasses attribute is blank. I found an APAR which states, prior to AIX 5.3, the default user stanza in /etc/security/audit/config was applied to users without an auditclasses attribute. However, this no longer seems to be the case in AIX 5.3 or higher.

I know there's a RFC2307AIX schema, which defines this LDAP attribute. However, I'd like to set a local default auditclasses and not have to convince the Active Directory admins to apply a schema extension. Besides, I cannot find a schema extension for eDirectory, which is also used.

Has anyone else seen this problem?

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.