Computing.Net > Forums > Unix > Trace root passwd change logs

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Trace root passwd change logs

Reply to Message Icon

Name: colin slater
Date: April 13, 2005 at 06:22:42 Pacific
OS: SCO OPENSERVER 5.0.5
CPU/Ram: dual processor 512K
Comment:

When someone unauthorised or accidently has changed the root password how can I trace who did this? Are there any log files to check? I have tried the sulog but with no joy.

Many thanks in advance...




Sponsored Link
Ads by Google

Response Number 1
Name: Luke Chi
Date: April 17, 2005 at 15:50:19 Pacific
Reply:

If there is no other way, use this one. Obviously, you have the root privilege. Although, I'm not sure about how to change the password on SCO, the concept is still the same.

On HP, the command used to change the password is passwd.

1. move the system passwd command to other directory or rename it.

2. write a wrapper C program called passwd to replace the system passwd command. This C program will log the information you need before the renamed system passwd above is called.


Luke Chi


0

Response Number 2
Name: colin slater
Date: April 18, 2005 at 03:15:13 Pacific
Reply:

Thks Luke, I'll give that a try.
Colin.

Many thanks in advance...


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Unix Forum Home


Sponsored links

Ads by Google


Results for: Trace root passwd change logs

root passwd LOST www.computing.net/answers/unix/root-passwd-lost/4391.html

I lost root passwd for Solaris www.computing.net/answers/unix/i-lost-root-passwd-for-solaris/1647.html

How to change root password on hp-ux www.computing.net/answers/unix/how-to-change-root-password-on-hpux-/2061.html