dbTalk Databases Forums  

does security auditing log user IP?

comp.databases.ingres comp.databases.ingres


Discuss does security auditing log user IP? in the comp.databases.ingres forum.



Reply
 
Thread Tools Display Modes
  #1  
Old   
nikosv
 
Posts: n/a

Default does security auditing log user IP? - 11-10-2010 , 12:01 PM






Is it possible for the security auditing to log the user IP or
terminal? I guess it could be since he uses a socket to connect to the
dbms server?

Reply With Quote
  #2  
Old   
Ingres Forums
 
Posts: n/a

Default Re: does security auditing log user IP? - 11-11-2010 , 10:59 AM






The SXF audit record structure is declared in src/back/hdr/hdr/sxf.h
(SXF_AUDIT_REC).
I don't see any field names that suggest the tty or IP of the end user
is recorded.


--
hanal04

Reply With Quote
  #3  
Old   
nikosv
 
Posts: n/a

Default Re: does security auditing log user IP? - 11-14-2010 , 11:59 AM



On Nov 11, 6:59*pm, Ingres Forums <info-
ing... (AT) kettleriverconsulting (DOT) com> wrote:
Quote:
The SXF audit record structure is declared in src/back/hdr/hdr/sxf.h
(SXF_AUDIT_REC).
I don't see any field names that suggest the tty or IP of the end user
is recorded.

--
hanal04
------------------------------------------------------------------------
hanal04's Profile:http://community.ingres.com/forum/member.php?userid=443
View this thread:http://community.ingres.com/forum/sh...ad.php?t=12718
thanks a lot for looking it up.Good to know , so I will have to rely
on other tricks to get the IP.
I have two scenarios :
1.a Windows fat client Openroad application
2.Unix/Linux terminals who connect to a ABF application

Since Openroad interops with COM+, I was thinking of writting a COM+
server object which would essentially be a wrapper on winsock
functions.So the client would interogate the object first, get the IP
and then log it into a table with a custom made query.I've seen
somewhere that Openroad supports automation,right?? if that is so I
could write the server in a language that supports automation like
Perl which will make my life easier than playing with the com C++
interfaces.

As far as the latter goes,I haven't looked into it yet but I guess
that I will have to parse the utmp Unix struct

Do you have any suggestions on it?

Reply With Quote
  #4  
Old   
Roy Hann
 
Posts: n/a

Default Re: does security auditing log user IP? - 11-15-2010 , 02:49 AM



nikosv wrote:

Quote:
On Nov 11, 6:59*pm, Ingres Forums <info-
ing... (AT) kettleriverconsulting (DOT) com> wrote:
The SXF audit record structure is declared in src/back/hdr/hdr/sxf.h
(SXF_AUDIT_REC).
I don't see any field names that suggest the tty or IP of the end user
is recorded.

--
hanal04
------------------------------------------------------------------------
hanal04's Profile:http://community.ingres.com/forum/member.php?userid=443
View this thread:http://community.ingres.com/forum/sh...ad.php?t=12718

thanks a lot for looking it up.Good to know , so I will have to rely
on other tricks to get the IP.
I have two scenarios :
1.a Windows fat client Openroad application
2.Unix/Linux terminals who connect to a ABF application

Since Openroad interops with COM+, I was thinking of writting a COM+
server object which would essentially be a wrapper on winsock
functions.So the client would interogate the object first, get the IP
and then log it into a table with a custom made query.I've seen
somewhere that Openroad supports automation,right?? if that is so I
could write the server in a language that supports automation like
Perl which will make my life easier than playing with the com C++
interfaces.

As far as the latter goes,I haven't looked into it yet but I guess
that I will have to parse the utmp Unix struct

Do you have any suggestions on it?
Without knowing why you want the IP address I'm unsure if this idea is
helpful or not.

Instead of building a big wobbly pile of diverse software layers using
different languages, APIs and operating system services, you can get
the name (if not the IP address) of the host machine your client is
running on very easily using just SQL. Look at the client_host
attribute in the ima_server_sessions table in imadb. (You can always
register the ima_server_sessions table in your production database if
that makes it easier to query with the application.)

--
Roy

UK Ingres User Association Conference 2011 will be on Tuesday June 7 2011.
Put the date in your diary today.

Reply With Quote
  #5  
Old   
nikosv
 
Posts: n/a

Default Re: does security auditing log user IP? - 11-15-2010 , 11:23 AM



Quote:
Without knowing why you want the IP address I'm unsure if this idea is
helpful or not.
for more fine grained auditing

Quote:
Instead of building a big wobbly pile of diverse software layers using
different languages, APIs and operating system services, you can get
the name (if not the IP address) of the host machine your client is
running on very easily using just SQL. Look at the client_host
attribute in the ima_server_sessions table in imadb. (You can always
register the ima_server_sessions table in your production database if
that makes it easier to query with the application.)
Roy,great advice (as always I must add!)
I will look into it.thanks

Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.