By using this site, you agree to our updated Privacy Policy and our Terms of Use. Manage your Cookies Settings.
431,819 Members | 1,459 Online
Bytes IT Community
+ Ask a Question
Need help? Post your question and get tips & solutions from a community of 431,819 IT Pros & Developers. It's quick & easy.

How to capture windows user login in Unix

P: 3
Hi all,
Is it possible to capture Windows user login in Unix? We have a AIX Unix system that allows users to login (using a common login) and run scripts. At the end of the day, we cannot find out which user executed the script. Is it possible in Unix to find out the windows login user id for the user logged in Unix using a common login.

Appreciate any suggestions.

AK
Jan 18 '11 #1

✓ answered by sicarie

I would HIGHLY recommend using separate Linux shell accounts and setting up something like LDAP to manage MS ActiveDirectory to Linux logins, however that's a suggestion.

How do the users connect? If it's via ssh then there's a log of what IP the user came in with at a specific time. Find the time the script was started, find the IP of the user who kicked it off, and check your network diagrams.

Share this Question
Share on Google+
4 Replies


sicarie
Expert Mod 2.5K+
P: 4,677
The user logins and escalations should be kept in various /var/log files (I can't remember the specific ones AIX uses.

It should be a matter of ensuring your logging levels are high enough to capture the information you're looking for without overloading your storage, and then finding the right logs to match the user login with the command execution.

What are you using for logging right now?
Jan 18 '11 #2

P: 3
Hi,
Sorry for late reply; I was on leave.

To log in to unix, the user currently uses a common login profile to process some data by running shell scripts. There are options available to the user, he just select an option to run. Currently, there is no specific user profile for each user logs in the system. Once logged in, I can only capture the unix login, which is a common login. I lose trace of who runs what.

I am just wondering if there a way to allow my unix capture the windows login.

Thanks.
AK
Jan 20 '11 #3

sicarie
Expert Mod 2.5K+
P: 4,677
I would HIGHLY recommend using separate Linux shell accounts and setting up something like LDAP to manage MS ActiveDirectory to Linux logins, however that's a suggestion.

How do the users connect? If it's via ssh then there's a log of what IP the user came in with at a specific time. Find the time the script was started, find the IP of the user who kicked it off, and check your network diagrams.
Jan 20 '11 #4

P: 3
Hi,

Yes, it is a good suggestion. I will try that, but I am not sure how far I may go with it. But I will give it a try.

Thanks a lot.
Jan 23 '11 #5

Post your reply

Sign in to post your reply or Sign up for a free account.